CVE-2026-13235

A missing authorization vulnerability in specific versions of Drupal AI allows for forceful browsing, potentially enabling unauthorized access to restricted resources. While the severity is rated low, organizations using affected versions (0.0.0 to 1.2.17, 1.3.0 to 1.3.8, and 1.4.0 to 1.4.3) should prioritize remediation to mitigate the risk of unauthorized data exposure. Users and administrators of Drupal AI should assess their deployments and apply necessary updates or patches.