CVE-2026-3573 - AI (Artificial Intelligence) - Moderately critical - Information Disclosure

Back Back to CVE browser

HIGH

AI (Artificial Intelligence) - Moderately critical - Information Disclosure - SA-CONTRIB-2026-028

Published Mar 26, 2026

7.5

HIGH

CVSS 3.1

EPSS 0.39%

Description

Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12.

Affected products

Vendor Drupal Product AI (Artificial Intelligence) Default
unaffected
- Version
  0.0.0
  Status
  affected
  Constraints
  <1.1.11
- Version
  1.2.0
  Status
  affected
  Constraints
  <1.2.12