CVE-2026-25784

Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation. The default value of $mwsgTokenAuthenticatorServiceCIDR in the container's LocalSettings.php was intended to restrict internal service authentication to the container network, but evaluated to an empty string when the environment variable WIKI_SERVICE_TOKEN_AUTH_ALLOWED was not set. An empty value disables the IP restriction in the token authenticator component (mwstake/mediawiki-component-token-authenticator). As a result, any user with read access to the wiki (anonymous users on publicly readable wikis) could obtain an application token from the REST API and use it to get a session with sysop privileges as the internal service user. This issue affects BlueSpice: from 5.2.3 before 5.2.7, and the 5.2.7 container images published before 2026-10-19 15:37 UTC.

• CWE-269
• CWE-1188

• https://en.wiki.bluespice.com/wiki/Security:Security_Advisories/BSSA-2026-07
• https://github.com/hallowelt/docker-bluespice-wiki/commit/04b840be565b508f6e741c376970909b69d2a444

Published

Oct 23, 2026

Last Modified

Nov 2, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25779Gitea versions up to and including 1.25.4 allow redirect byp…6.1
• CVE-2026-2578Mattermost versions 11.3.x <= 11.3.0 fail to preserve the re…4.3
• CVE-2026-25780Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.1…4.3
• CVE-2026-25781in OpenHarmony v6.0 and prior versions allow a local attacke…8.4
• CVE-2026-25782Gitea versions before 1.25.5 look up tracked-time entries by…5.3
• CVE-2026-25783Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.1…4.3
• CVE-2026-25785Path traversal vulnerability exists in Lanscope Endpoint Man…9.8
• CVE-2026-25786Affected devices do not properly validate and sanitize PLC/s…9.3
• CVE-2026-25787Affected devices do not properly validate and sanitize Techn…9.3
• CVE-2026-25789Affected devices do not properly validate and sanitize filen…7.2
• CVE-2026-2579The WowStore – Store Builder & Product Blocks for WooCommerc…7.5
• CVE-2026-25790Wazuh is a free and open source platform used for threat pre…7.2