CVE-2026-39934CWE-835

Growth Experiments ReassignMenteesJob runs as an infinite loop

Medium · published April 7, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

Loop with unreachable exit condition ('infinite loop') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This issue was remediated only on the `master` branch.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
EPSS
0.00432 · 36.5th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2026-04-07T22:00Z
EPSS history
Timeline
  • 07 APR 22:00Z
    Growth Experiments ReassignMenteesJob runs as an infinite loop
    cvelistv5