๐Ÿ” CVE Alert

CVE-2026-118550

UNKNOWN 0.0

AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.

CWE CWE-525
Vendor drupal
Product ai (artificial intelligence)
Ecosystems
Industries
WebMedia
Published Oct 30, 2026
Stay Ahead of the Next One

Get instant alerts for drupal ai (artificial intelligence)

Be the first to know when new unknown vulnerabilities affecting drupal ai (artificial intelligence) are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Drupal / AI (Artificial Intelligence)
0.0.0 < 1.4.11 1.5.0 < 1.5.2

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
drupal.org: https://www.drupal.org/sa-contrib-2026-270

Credits

Marcus Johansson (marcus_johansson) Scott Euser (scott_euser) Artem Dmitriiev (a.dmitriiev) Scott Euser (scott_euser) Swan Kalata (akalata) Bram Driesen (bramdriesen) Greg Knaddison (greggles) Juraj Nemec (poker10)