Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-114554 DRUPAL-CONTRIB-2026-251EUVD-2026-113521GHSA-8cj5-9925-mw98

AI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Description

Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to Text versions: from 0.0.0 to 1.0.1.

Affected products

VendorProductAffectedFixed
Drupal AI File to Text 0.0.0 – < 1.0.1 1.0.1

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/ai_file_to_text < 1.0.1 1.0.1 DRUPAL-CONTRIB-2026-251

Advisories 1

References