Path Traversal Vulnerability in Drupal Media Library Importer
CVE-2026-81163

Currently unrated

Key Information:

Vendor: Drupal
Status: Media Library Importer
Vendor: CVE Published:; 22 October 2026

What is CVE-2026-81163?

A Path Traversal vulnerability exists in the Drupal Media Library Importer, allowing attackers to exploit improper limitations of a pathname. This flaw enables unauthorized access to restricted directories, potentially compromising sensitive data. Users of Media Library Importer versions from 0.0.0 to 2.1.6 are at risk and should apply available updates promptly.

Affected Version(s)

Media Library Importer 0.0.0 < 2.1.6

References

https://www.drupal.org/sa-contrib-2026-129

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 22, 2026
Vulnerability Reserved
Aug 26, 2026

Credit

Marcus Johansson (marcus_johansson)

Italo Mairo (itamair)

Swan Kalata (akalata)

Greg Knaddison (greggles)

Juraj Nemec (poker10)

CVE-2026-81163 Data

JSON