Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-0945 DRUPAL-CONTRIB-2026-002EUVD-2026-5354GHSA-9mhv-cw55-h9jp

Role Delegation - Moderately critical - Access bypass - SA-CONTRIB-2026-002

Published Feb 4, 2026 · Updated Feb 12, 2026 · Assigned by drupal

Description

Privilege Defined With Unsafe Actions vulnerability in Drupal Role Delegation allows Privilege Escalation.This issue affects Role Delegation: from 1.3.0 before 1.5.0.

Affected products

VendorProductAffectedFixed
Drupal Role Delegation 1.3.0 – < 1.5.0 1.5.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/role_delegation >= 1.3.0, < 1.5.0 1.5.0 DRUPAL-CONTRIB-2026-002

Advisories 1

References