CVE-2026-13235 Overview
CVE-2026-13235 is a Missing Authorization vulnerability [CWE-862] in the Drupal AI (Artificial Intelligence) contributed module. The flaw allows Forceful Browsing, meaning authenticated users can access resources or functionality that should be restricted by access control checks. Affected releases include versions 0.0.0 through 1.2.17, 1.3.0 through 1.3.8, and 1.4.0 through 1.4.3. Exploitation requires network access and high privileges, and yields limited confidentiality and integrity impact with no availability impact. The Drupal security team published advisory sa-contrib-2026-055 covering the issue and its remediation.
Critical Impact
Authenticated users with elevated privileges can bypass authorization checks in the Drupal AI module to reach restricted endpoints, exposing limited confidentiality and integrity risk to affected Drupal sites.
Affected Products
- Drupal AI (Artificial Intelligence) module versions 0.0.0 to 1.2.17
- Drupal AI (Artificial Intelligence) module versions 1.3.0 to 1.3.8
- Drupal AI (Artificial Intelligence) module versions 1.4.0 to 1.4.3
Discovery Timeline
- 2026-07-10 - CVE-2026-13235 published to the National Vulnerability Database (NVD)
- 2026-07-16 - Last updated in NVD database
Technical Details for CVE-2026-13235
Vulnerability Analysis
The Drupal AI module provides integration with artificial intelligence services inside Drupal sites. CVE-2026-13235 stems from missing authorization checks on one or more routes or controllers exposed by the module. An authenticated attacker can directly request restricted URLs, a technique known as Forceful Browsing, and reach functionality intended for higher-trust roles. The attacker interacts with the module over the network without user interaction. Successful exploitation returns limited disclosure of information and permits limited modification of module-controlled resources. Availability is not impacted.
The issue is classified under CWE-862: Missing Authorization. This class of weakness occurs when application code performs authentication but omits an authorization check before executing a sensitive action. The EPSS probability at publication is 0.161%, indicating a low forecast likelihood of near-term exploitation.
Root Cause
The module fails to enforce access control on protected routes or service endpoints. Drupal applications typically declare access requirements through routing definitions such as _permission, _access, or custom access callbacks. Missing or overly permissive definitions on AI module routes let authenticated users invoke handlers without holding the required permission.
Attack Vector
An attacker authenticates to a target Drupal site with an account that already holds elevated privileges. The attacker then issues direct HTTP requests to AI module routes that should be gated to administrators or another restricted role. Because access checks are missing, the handler executes and returns data or performs the action. Consult the Drupal Security Advisory for the specific affected routes.
Detection Methods for CVE-2026-13235
Indicators of Compromise
- Unexpected HTTP 200 responses to AI module URLs from accounts that should not have module access.
- Access log entries showing non-administrative users requesting AI module administrative or configuration paths.
- Watchdog or dblog entries recording AI module operations performed by non-privileged accounts.
Detection Strategies
- Audit Drupal user roles and enumerate which accounts hold permissions related to the AI module.
- Review web server access logs for requests to AI module routes and correlate against the authenticated user's role.
- Compare installed module versions against the fixed releases listed in sa-contrib-2026-055.
Monitoring Recommendations
- Forward Drupal dblog and web server access logs to a central SIEM for correlation and retention.
- Alert on repeated 403-to-200 transitions on AI module paths after module upgrades or configuration changes.
- Monitor for privilege changes and new role assignments granting AI module permissions.
How to Mitigate CVE-2026-13235
Immediate Actions Required
- Upgrade the Drupal AI module to a fixed release as directed by the Drupal Security Advisory.
- Inventory all Drupal sites and identify installations running the affected version ranges.
- Review AI module permission grants and remove access from roles that do not require it.
Patch Information
Upgrade the Drupal AI (Artificial Intelligence) module beyond the affected ranges: past 1.2.17 on the 1.2.x branch, past 1.3.8 on the 1.3.x branch, and past 1.4.3 on the 1.4.x branch. Refer to sa-contrib-2026-055 on drupal.org for the exact fixed versions and download links.
Workarounds
- Restrict access to AI module routes at the web server or reverse proxy layer until the module is upgraded.
- Temporarily disable the Drupal AI module on sites where an immediate upgrade is not possible.
- Reduce the number of accounts holding elevated Drupal roles to shrink the exploitable population.
# Upgrade the Drupal AI module using Composer, then apply database updates
composer update drupal/ai --with-dependencies
drush updatedb -y
drush cache:rebuild
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
