CVE-2026-13236: Drupal AI Agents Package Insufficient Permission Check Vulnerability
Summary
CVE-2026-13236: This module provides the entity type and runtime for Drupal AI Agents, enabling agents to use tools. Affects drupal/ai_agents across 3 version ranges.
< 1.1.4
>= 1.2.0, < 1.2.5
>= 1.3.0, < 1.3.1
Fixed in 1.1.4, 1.2.5 or 1.3.1, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The 'drupal/ai_agents' package is a module designed for Drupal that provides the entity type and runtime for AI agents, allowing them to utilize various tools effectively. This module is integral for developers looking to implement AI functionalities within their Drupal applications. However, it has been identified that the module does not adequately verify the necessary permissions when a tool attempts to load content entities, leading to potential security risks.
Vulnerability Detail
The vulnerability arises from the module's failure to enforce proper permission checks when loading content entities via tools. This oversight could allow unauthorized users to access or manipulate content entities through an agent configured to use the affected tool. The risk is somewhat mitigated by the requirement that an agent must be specifically configured to use the vulnerable tool, and the attacker must have access to that agent. Nevertheless, this vulnerability poses a significant threat to the integrity of the application and its data.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.1.41.1.4 -
>= 1.2.0, < 1.2.51.2.5 -
>= 1.3.0, < 1.3.11.3.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary measure, ensure that only trusted users have access to the agents configured to use the affected tools. Additionally, review and restrict permissions for the tools to minimize exposure until the package can be updated.
Conclusion
In summary, CVE-2026-13236 presents a significant security vulnerability in the Drupal AI Agents package due to insufficient permission checks. It is crucial for users to update to the latest patched versions to safeguard their applications and data integrity. Temporary workarounds can help mitigate risks until the update is applied.
See every vulnerability recorded for drupal/ai_agents →
FAQ
CVE-2026-13236 is a vulnerability in the Drupal AI Agents package that allows insufficient permission checks when loading content entities.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors open-source vulnerabilities without requiring installation.
The risks include unauthorized access to content entities and potential manipulation of data by attackers who gain access to the configured agents.
You can update the package using Composer commands to install the patched versions as detailed in the 'how_to_fix' section.
Yes, you can restrict access to the agents and review permissions for the tools to minimize exposure until the package is updated.
References
Related vulnerabilities
Recent vulnerabilities recorded for drupal/ai_agents.
