Skip to content
OpenAdvisories
Medium · 4.6 CVE-2026-84913 DRUPAL-CONTRIB-2026-121EUVD-2026-107878GHSA-q2j4-w9mx-9w5r

AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121

Published Oct 22, 2026 · Updated Oct 22, 2026 · Assigned by drupal

Description

Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1.

Affected products

VendorProductAffectedFixed
Drupal AI Translate 0.0.0 – < 1.3.2, 1.4.0 – < 1.4.1 1.3.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/ai_translate < 1.3.2 · >= 1.4.0, < 1.4.1 1.3.2, 1.4.1 DRUPAL-CONTRIB-2026-121

Advisories 1

References