Authorization Flaw in Drupal SmartLinker AI Affects Multiple Versions
CVE-2026-107307

Currently unrated

Key Information:

Vendor

Drupal
Status
Smartlinker Ai
Vendor
CVE Published:
30 October 2026

What is CVE-2026-107307?

An incorrect authorization vulnerability in Drupal SmartLinker AI permits unauthorized users to perform forceful browsing. This issue affects versions 0.0.0 to 1.0.3 and could allow an attacker to access restricted areas of the application, compromising sensitive data and system integrity. It is crucial for users to update their installations to the latest version to mitigate potential security risks. For detailed information, refer to the official documentation.

Affected Version(s)

SmartLinker AI 0.0.0 < 1.0.3

References

https://www.drupal.org/sa-contrib-2026-210

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marcus Johansson (marcus_johansson)
Marcus Johansson (marcus_johansson)
Zeeshaan khann (zeeshan_khan)
Swan Kalata (akalata)
Juraj Nemec (poker10)
.