Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-114571 DRUPAL-CONTRIB-2026-252EUVD-2026-113520GHSA-789f-rg5c-h6q2

Rabbit Hole - Moderately critical - Access Bypass - SA-CONTRIB-2026-252

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Vendor: Drupal Product: Rabbit Hole Package: drupal/rabbit_hole Ecosystem: Packagist

Description

Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful Browsing. This issue affects Rabbit Hole versions: from 0.0.0 to 1.3.0.

Affected products

VendorProductAffectedFixed
Drupal Rabbit Hole 0.0.0 – < 1.3.0 1.3.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/rabbit_hole < 1.3.0 1.3.0 DRUPAL-CONTRIB-2026-252

Advisories 1

References