The vulnerability identified as CVE-2026-100378 is a missing authorization flaw in the Mediawiki Translate Extension maintained by the Wikimedia Foundation. It allows access to functionality that should be restricted by ACLs but is not properly constrained, potentially enabling unauthorized actions. The affected versions include all versions prior to 1.46.1, specifically including 1.45.5 and 1.43.10. No patch links or vendor advisories are provided in the input data, and no known exploits are reported in the wild.

Users with limited privileges may gain unauthorized access to certain functions within the Translate Extension, potentially leading to privilege escalation or unauthorized modifications. The exact impact depends on the specific functionality accessed without proper authorization. No evidence of active exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, administrators should monitor the Wikimedia Foundation's security advisories for updates. Until a fix is available, consider restricting access to the Translate Extension or limiting user privileges as a precaution.