Skip to content
OpenAdvisories
High · 7.5 CVE-2026-3573 DRUPAL-CONTRIB-2026-028EUVD-2026-16391

AI (Artificial Intelligence) - Moderately critical - Information Disclosure - SA-CONTRIB-2026-028

Published Mar 26, 2026 · Updated Mar 30, 2026 · Assigned by drupal

Vendor: Drupal Product: AI (Artificial Intelligence) Package: drupal/ai Ecosystem: Packagist

Description

Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12.

Affected products

VendorProductAffectedFixed
Drupal AI (Artificial Intelligence) 0.0.0 – < 1.1.11, 1.2.0 – < 1.2.12 1.1.11

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/ai < 1.1.11 · >= 1.2.0, < 1.2.12 1.1.11, 1.2.12 DRUPAL-CONTRIB-2026-028

References