Drupal AI Translate <1.4.2 Auth Bypass: Forceful Browse
CVE-2026-84913 Published on October 22, 2026
AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121
Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1.
Weakness Type
What is an AuthZ Vulnerability?
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVE-2026-84913 has been classified to as an AuthZ vulnerability or weakness.
Affected Versions
Drupal AI Translate:- Version 0.0.0 and below 1.3.2 is affected.
- Version 1.4.0 and below 1.4.1 is affected.