Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-118548 DRUPAL-CONTRIB-2026-268EUVD-2026-113504GHSA-526v-6mxg-q55q

AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-2026-268

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Description

Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.

Affected products

VendorProductAffectedFixed
Drupal AI (Artificial Intelligence) 0.0.0 – < 1.4.11, 1.5.0 – < 1.5.2 1.4.11

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/ai < 1.4.11 · >= 1.5.0, < 1.5.2 1.4.11, 1.5.2 DRUPAL-CONTRIB-2026-268

Advisories 1

References