CVE-2026-0945
CVE-2026-0945 · Role Delegation - Moderately critical - Access bypass - SA-CONTRIB-2026-002
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Privilege Defined With Unsafe Actions vulnerability in Drupal Role Delegation allows Privilege Escalation.This issue affects Role Delegation: from 1.3.0 before 1.5.0.
CVSS 5.4 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
role delegation
- Versions
- ≥ 1.3.0, < 1.5.0: Affected (semver)
Update to 1.5.0
drupal/role_delegation Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: ≥ 1.3.0, < 1.5.0
Update to 1.5.0