CVE-2026-104462

Summary

YesWiki before 4.6.7 has an SQL injection vulnerability in its Bazar nuagetag action that allows attackers with page-write access to inject malicious SQL queries. This can lead to unauthorized data exposure including password hashes and arbitrary table data.

Exploitability

Exploitation is relatively straightforward for attackers with page-write access, requiring only a single crafted nuagetag tag with a backslash to break quote parity and inject a UNION subquery.

Blast radius

The vulnerability affects default installations where unauthenticated users can write pages, potentially exposing sensitive data from the database including user credentials and application data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to YesWiki 4.6.7 or later to remediate this SQL injection vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.