Low · 1.1 CVE-2025-61649 EUVD-2025-206641GHSA-v687-vxc5-92hv

UserInfoCard: Check that performing user has permission to view log entries for number of past blocks

Published Feb 3, 2026 · Updated Mar 3, 2026 · Assigned by wikimedia-foundation

Description

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php.

This issue affects CheckUser: from 7cedd58781d261f110651b6af4f41d2d11ae7309.

Vendor	Product	Affected	Fixed
Wikimedia Foundation	CheckUser	7cedd58781d261f110651b6af4f41d2d11ae7309	—