A SPARQL injection vulnerability exists in the Wikidata Lookup expansion module (wiki.py) of MISP misp-modules. Authenticated users with access to this module can inject crafted SPARQL syntax into queries sent to the Wikidata endpoint, potentially manipulating query logic or causing errors that leak internal information. The vulnerability does not directly compromise the MISP server or its stored data.