CVE-2025-61649 – UserInfoCard: Check that performing user has permission to view log entries for number of past blocks

CVE ID : CVE-2025-61649

Published : Feb. 3, 2026, 12:17 a.m. | 59 minutes ago

Description : Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php.

This issue affects CheckUser: from 7cedd58781d261f110651b6af4f41d2d11ae7309.

Severity: 1.1 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…