Missing Auth: Drupal AI v1.3.13, 1.4.01.4.8 Allow Forceful Browse
CVE-2026-84912 Published on October 22, 2026
AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, from 1.4.0 to 1.4.8.
Weakness Type
What is an AuthZ Vulnerability?
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVE-2026-84912 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2026-84912
Want to know whenever a new CVE is published for Drupal Artificial Intelligence? stack.watch will email you.
Affected Versions
Drupal AI (Artificial Intelligence):- Version 0.0.0 and below 1.3.13 is affected.
- Version 1.4.0 and below 1.4.8 is affected.