Low severity · published Feb 3, 2026
CVE-2025-67482
Lua segfault in unpack()
1.7
CVSS
0.3%
EPSS
No
On KEV
Description
Vulnerability in Wikimedia Foundation Scribunto, Wikimedia Foundation luasandbox. This vulnerability is associated with program files includes/Engines/LuaCommon/lualib/mwInit.Lua, library.C.
This issue affects Scribunto: from * before 1.39.16, 1.43.6, 1.44.3, 1.45.1; luasandbox: from * before fea2304f8f6ab30314369a612f4f5b165e68e95a.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Scribunto · Wikimedia Foundation
before 1.39.16, 1.43.6, 1.44.3, 1.45.1 · source: vendor
LU
luasandbox · Wikimedia Foundation
before fea2304f8f6ab30314369a612f4f5b165e68e95a · source: vendor