–
Not scored
CVE-2026-118548
AI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-2026-268
AI (Artificial Intelligence) · Incorrect authorization · CWE-863AffectedAI (Artificial Intelligence)
FixUpdate to 1.4.11, 1.5.2 or newer
PublishedOct 30, 03:08 · drupal
ScoredNot yet
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:11 UTC
What we know
No known exploitation. CISA KEV, checked 22:11 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
No severity score yet.
Description
Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.
From drupal
Affected and fixed versions
ProductAffectedFixed inAI (Artificial Intelligence)0.0.0 – before 1.4.111.4.11AI (Artificial Intelligence)1.5.0 – before 1.5.21.5.2
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known