Skip to content
OpenAdvisories
Medium · 5.9 CVE-2026-118550 DRUPAL-CONTRIB-2026-270EUVD-2026-113502GHSA-jqpj-2gpx-ffr5

AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by drupal

Description

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.

Affected products

VendorProductAffectedFixed
Drupal AI (Artificial Intelligence) 0.0.0 – < 1.4.11, 1.5.0 – < 1.5.2 1.4.11

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/ai < 1.4.11 · >= 1.5.0, < 1.5.2 1.4.11, 1.5.2 DRUPAL-CONTRIB-2026-270

Advisories 1

References