This vulnerability (CVE-2026-34092) in MediaWiki involves the exposure of sensitive information to unauthorized actors due to an issue in the includes/Skin/Skin.Php file. It affects multiple versions of MediaWiki prior to 1.43.7, 1.44.4, and 1.45.2. The CVSS 4.0 vector indicates network attack vector, high attack complexity, low confidentiality impact, and requires low privileges with user interaction. No official remediation or patch information is currently available from the vendor advisory or other sources.

The vulnerability allows unauthorized actors to access sensitive information, but the impact is limited as reflected by the low CVSS score (2.1). There is no indication of privilege escalation, integrity, or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the Wikimedia Foundation vendor advisory for current remediation guidance. Until an official fix is released, monitor for updates from the vendor. No specific mitigations are provided in the available data.