This vulnerability (CVE-2026-58033) in MediaWiki involves exposure of sensitive information to unauthorized actors, classified under CWE-200. It is linked to the program file includes/Actions/InfoAction.php and affects MediaWiki versions before 1.43.9, 1.44.6, 1.45.4, and 1.46.0. The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges required, user interaction required, and low confidentiality impact. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

The vulnerability allows unauthorized actors to access sensitive information within affected MediaWiki installations. The CVSS score of 5.3 reflects a moderate impact primarily on confidentiality. There is no indication of privilege escalation, integrity, or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, administrators should monitor Wikimedia Foundation advisories for updates. Until a patch is available, consider restricting access to affected MediaWiki instances and sensitive information where feasible.