CVE-2026-13235: Drupal AI missing authorization in agent tools

CVE-2026-13235 · Severity: info · CVSS 4.2 · Published 2026-07-10

The Drupal AI module, which integrates artificial intelligence and language models into websites, contains a security flaw that could allow unauthorized access to certain administrative actions. If a site is configured to allow non-privileged users to interact with AI agents, an attacker could potentially trigger system actions they are not authorized to perform. This could lead to unauthorized data modifications or exposure of internal site functions.

Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai. Vendors: Drupal, Packagist:Https://Packages.Drupal.Org/8.

Quick answers

Is CVE-2026-13235 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-13235 being exploited in the wild.
How severe is CVE-2026-13235?
Informational severity, with a CVSS score of 4.2, published 10 July 2026.
Which products and versions are affected?
Drupal AI (Artificial Intelligence) 0.0.0 to 1.2.17, 1.3.0 to 1.3.8, 1.4.0 to 1.4.3; Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai ECOSYSTEM:introduced=0,fixed=1.2.17|ECOSYSTEM:introduced=1.3.0,fixed=1.3.8|ECOSYSTEM:introduced=1.4.0,fixed=1.4.3.
Is there a fix for CVE-2026-13235?
Yes. Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai: upgrade to 1.2.17 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-13235 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-13235?
Check whether you run Drupal AI (Artificial Intelligence) or Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai: upgrade to 1.2.17 or later

Technical details

A missing authorization vulnerability (CWE-862) exists in the Drupal AI (Artificial Intelligence) module. The flaw stems from incorrect access validation in certain Drupal core actions exposed as agent tools, as well as missing access-level definitions for some core actions. An attacker with permission to communicate with an affected AI agent can perform 'forceful browsing' to execute these actions without proper authorization. Exploitation is mitigated by the requirement that the site must be specifically configured to expose these tools to non-privileged users. The issue is resolved in versions 1.2.17, 1.3.8, and 1.4.3.

Affected products

  • Drupal AI (Artificial Intelligence) 0.0.0 to 1.2.17, 1.3.0 to 1.3.8, 1.4.0 to 1.4.3

Identifiers

  • CVE-2026-13235
  • DRUPAL-CONTRIB-2026-055

Timeline

  • 2026-06-24: advisory: Drupal security advisory SA-CONTRIB-2026-055 published
  • 2026-07-10: disclosed: CVE-2026-13235 published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.