CVE-2026-58029 is a vulnerability in MediaWiki affecting multiple PHP program files responsible for handling authentication data and account linking/unlinking functionality. The affected versions include all releases prior to 1.46.0, specifically 1.45.4, 1.44.6, and 1.43.9. The vulnerability allows an attacker to exploit the system remotely over the network without privileges, but requires user interaction. The impact on confidentiality and integrity is low, and availability impact is low as well. The vulnerability is currently published with no official remediation level or patch available. No exploits have been observed in the wild to date.

The vulnerability allows remote attackers to potentially affect authentication-related processes in MediaWiki without requiring privileges, but user interaction is necessary. The impact on confidentiality, integrity, and availability is low, limiting the severity of potential exploitation. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Wikimedia Foundation advisories for updates. Until a patch is available, consider restricting access to affected API endpoints and authentication-related functions if feasible.