NetSight
medium4.8

CVE-2026-13237

Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing.

Impact

Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.

Affected products

VendorProductAffected versions
Artificial Intelligence ProjectArtificial Intelligence
before 1.1.4
from 1.2.0 before 1.2.5
from 1.3.0 before 1.3.1

Weakness classification

References