TI-2025-38160 Aliases CVE-2025-61766

Bucket vulnerable to infinite recursion when querying a bucket using the != operator

LOW 29CWE-674Published 2025-10-06 · Updated 2025-10-06

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-674.

Summary

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the `!=` comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leading to a denial of service. Version 1.0.0 contains a patch for the issue.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00385 32nd percentileScored 2026-11-07

Fix Fixed mediawiki-extensions-Bucket (weirdgloop): 1.0.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
weirdgloop	mediawiki-extensions-Bucket	before 1.0.0	1.0.0	Patch available	CNA

mediawiki-extensions-Bucket Vendorweirdgloop Affected before 1.0.0 Fixed in 1.0.0 Patch available CNA

Remediation

Fix · CNA mediawiki-extensions-Bucket (weirdgloop) Fixed in 1.0.0

Timeline

2026-10-02 Threatist record created from CVE-2025-61766

References

Other 3

TI-2026-23742 Stored XSS on Bucket namespace pages CVSS 4.0HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences