IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
4.8Medium

CVE-2026-13237AI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057

Drupal AI Agents Published: (4 months ago)

Description

Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.

Weakness (CWE): CWE-863

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
artificial intelligence project artificial intelligence < 1.1.4
Drupal AI Agents 0.0.0 – < 1.1.4, 1.2.0 – < 1.2.5, 1.3.0 – < 1.3.1

References and patches

CPE matches (NVD) (3)
  • cpe:2.3:a:artificial_intelligence_project:artificial_intelligence:*:*:*:*:*:drupal:*:* < 1.1.4
  • cpe:2.3:a:artificial_intelligence_project:artificial_intelligence:*:*:*:*:*:drupal:*:* ≥ 1.2.0 < 1.2.5
  • cpe:2.3:a:artificial_intelligence_project:artificial_intelligence:*:*:*:*:*:drupal:*:* ≥ 1.3.0 < 1.3.1