CVE-2026-32736
Medium
Description
The Hytale Modding Wiki is a free service for Hytale mods to host their documentation & wikis. An Insecure Direct Object Reference (IDOR) vulnerability in versions of the wiki prior to 1.0.0 exposes mod authors' personal information - including full names and email addresses - to any authenticated user who visits a mod page. Any user who creates an account can access sensitive author details by simply navigating to a mod's page via its slug. Version 1.0.0 fixes the issue.
SeverityMedium
CVSS4.3
Exploit probability13. percentile0.2%
ProductHytalemodding Wiki
PublishedMar 18, 2026
First seenMar 18, 2026
Weakness typeCWE-862Missing authorization
How to fix
Update
- hytalemodding wiki1.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hytalemodding wiki | v < 1.0.0 | 1.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.