🔐 CVE Alert

CVE-2026-13235

LOW 3.3

AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-055

CVSS Score
3.3
EPSS Score
0.1%
EPSS Percentile
4th

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.

CWE CWE-862
Vendor drupal
Product ai (artificial intelligence)
Ecosystems
Industries
WebMedia
Published Jul 10, 2026
Last Updated Jul 13, 2026
Stay Ahead of the Next One

Get instant alerts for drupal ai (artificial intelligence)

Be the first to know when new low vulnerabilities affecting drupal ai (artificial intelligence) are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Drupal / AI (Artificial Intelligence)
0.0.0 < 1.2.17 1.3.0 < 1.3.8 1.4.0 < 1.4.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗
drupal.org: https://www.drupal.org/sa-contrib-2026-055

Credits

AKHIL BABU (akhil babu) Kuniyoshi Noguchi (kuninogu) Artem Dmitriiev (a.dmitriiev) Marcus Johansson (marcus_johansson) Dezső Biczó (mxr576) Valery Lourie (valthebald) Bram Driesen (bramdriesen) Greg Knaddison (greggles) Drew Webber (mcdruid) Juraj Nemec (poker10)