CVE-2026-10768
CVE-2026-10768 · LocalGov Workflows - Moderately critical - Information disclosure - SA-CONTRIB-2026-039
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. This issue affects LocalGov Workflows versions: from 0.0.0 to 1.6.0.
CVSS 9.8 · Critical · EPSS 2.1% · Public exploit · Fix available
- Published
- Updated
Stack: php
Affected products and versions
localgov workflows
- Versions
- ≥ 0.0.0, < 1.6.0: Affected (semver)
Update to 1.6.0
drupal/localgov_workflows Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.6.0
Update to 1.6.0