Missing Authorization Vulnerability in Drupal AI Translate
CVE-2026-84913

Currently unrated

Key Information:

Vendor

Drupal
Status
Ai Translate
Vendor
CVE Published:
22 October 2026

What is CVE-2026-84913?

A missing authorization vulnerability in Drupal's AI Translate enables unauthorized users to exploit forceful browsing. This vulnerability allows attackers to access content and functionalities without proper permissions, potentially leading to data leakage or unauthorized modifications. The affected versions include AI Translate from 0.0.0 to 1.3.2 and from 1.4.0 to 1.4.1. It is crucial for users to take immediate action to mitigate potential risks associated with this vulnerability.

Affected Version(s)

AI Translate 0.0.0 < 1.3.2

AI Translate 1.4.0 < 1.4.1

References

https://www.drupal.org/sa-contrib-2026-121

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Marcus Johansson (marcus_johansson)
Artem Dmitriiev (a.dmitriiev)
Marcus Johansson (marcus_johansson)
Sven Decabooter (svendecabooter)
Valery Lourie (valthebald)
Swan Kalata (akalata)
Greg Knaddison (greggles)
Juraj Nemec (poker10)
.