CVE-2009-4762: MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstance...

Security readout for executives and security teams

This flaw lets a remote user bypass intended access restrictions in vulnerable MoinMoin wiki versions when hierarchical ACLs are processed incorrectly. Business impact depends on what the wiki protects: internal notes, operational procedures, or restricted project pages could become accessible to users who should not see them. Exposure is likely limited to organizations still running affected MoinMoin 1.7.x or 1.8.x installations, especially with hierarchical ACLs and restricted wiki content. Internet-facing wikis increase business risk, but the source bundle does not identify widespread exploitation. Treat as a targeted confidentiality and authorization risk, not an emergency RCE. Prioritize patching any internet-facing or sensitive internal MoinMoin wiki, especially where ACLs protect confidential operational, customer, or project information. Mitigation focus: Upgrade MoinMoin 1.7.x to 1.7.3 or later.; Upgrade MoinMoin 1.8.x to 1.8.3 or later.; Apply Debian or Ubuntu security updates where packages are distro-managed..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.