CVE-2026-84912
CVE-2026-84912 · AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8.
CVSS 4.6 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
ai (artificial intelligence)
- Versions
- ≥ 0.0.0, < 1.3.13: Affected (semver)
- ≥ 1.4.0, < 1.4.8: Affected (semver)
Update to 1.3.13; Update to 1.4.8
drupal/ai Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.3.13
- ECOSYSTEM: ≥ 1.4.0, < 1.4.8
Update to 1.3.13; Update to 1.4.8