CVE-2026-13235

Summary

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.

Affected Software

VendorProductVersion RangeStatus
DrupalAI (Artificial Intelligence)0.0.0 < 1.2.17affected
DrupalAI (Artificial Intelligence)1.3.0 < 1.3.8affected
DrupalAI (Artificial Intelligence)1.4.0 < 1.4.3affected

Weaknesses

  • CWE-862: CWE-862 Missing Authorization

References