CVE-2026-13235: Drupal AI Module Access Bypass Vulnerability
Summary
CVE-2026-13235: This module enables you to utilize an agent to use Drupal core actions tools with bypassed access. Affects drupal/ai across 3 version ranges.
< 1.2.17
>= 1.3.0, < 1.3.8
>= 1.4.0, < 1.4.3
Fixed in 1.2.17, 1.3.8 or 1.4.3, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Drupal AI module allows users to leverage Drupal core actions through agent tools. It is designed to enhance the functionality of Drupal by enabling automated processes and integrations. However, this module has been found to have access validation issues, which could allow unauthorized users to execute certain actions without proper permissions.
Vulnerability Detail
The vulnerability arises from improper access validation in the Drupal AI module, where certain core actions exposed as agent tools lack the necessary access-level definitions. This oversight could allow an attacker with access to communicate with an affected agent to perform actions that should be restricted to privileged users. The risk is heightened if the site is configured to expose these tools to non-privileged users, potentially leading to unauthorized data manipulation or system changes.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.2.171.2.17 -
>= 1.3.0, < 1.3.81.3.8 -
>= 1.4.0, < 1.4.31.4.3
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary measure, restrict access to the affected agent tools to only trusted users until the module can be updated. This can be done by adjusting the permissions settings in the Drupal admin interface.
Conclusion
The Drupal AI module has a significant vulnerability that could allow unauthorized access to core actions due to improper access validation. It is crucial to update to the latest patched versions to mitigate this risk and ensure the security of your Drupal installation.
See every vulnerability recorded for drupal/ai →
FAQ
The vulnerability allows unauthorized access to certain actions in the Drupal AI module due to improper access validation.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Affected versions include any version below 1.2.17, versions 1.3.0 to 1.3.8, and versions 1.4.0 to 1.4.3.
Yes, you can restrict access to the affected tools to trusted users as a temporary workaround.
You can reach out to the contributors, AKHIL BABU and Kuniyoshi Noguchi, via their Drupal profiles for more details.
References
Related vulnerabilities
Recent vulnerabilities recorded for drupal/ai.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
