Semantic MediaWiki versions 2.5.0 through 7.3.0 contain an improper authorization flaw that allows ordinary editors to permanently protect pages by adding an "Is edit protected" annotation. The EditProtectionUpdater applies indefinite edit and move restrictions without verifying the author’s rights, effectively locking out other editors and administrators. This results in a denial of service for collaboration and maintenance within the wiki.

The vulnerability affects all installations of Semantic MediaWiki version 2.5.0 up to, but not including, 7.3.1. Users running these versions on any platform are at risk unless the configuration has been altered to remove the relevant feature.

The CVSS score is 7.1, indicating a moderate to high severity. Although the EPSS score is not available, the flaw only requires a normal authenticated edit right and can be executed through the standard web interface, making it realistic for attackers. The vulnerability is not listed in the CISA KEV catalog, and no known public exploits are reported, but the very simple exploitation path implies a high likelihood of abuse if left unpatched.