{"id":"CVE-2026-13237","aliases":["DRUPAL-CONTRIB-2026-057","EUVD-2026-43061","GHSA-7c7x-54hv-3m8c"],"status":"published","title":"AI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057","description":"Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.","severity":{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00217,"percentile":0.1227,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-863"],"published":"2026-06-24T18:39:24Z","modified":"2026-10-28T02:31:04Z","fixes":[{"ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/ai_agents","fixed_in":["1.1.4","1.2.5","1.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/ai_agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4"}]},{"type":"ECOSYSTEM","events":[{"introduced":"1.2.0"},{"fixed":"1.2.5"}]},{"type":"ECOSYSTEM","events":[{"introduced":"1.3.0"},{"fixed":"1.3.1"}]}]}],"products":[{"vendor":"artificial_intelligence_project","product":"artificial_intelligence"},{"vendor":"drupal","product":"ai agents"}],"references":[{"url":"https://www.drupal.org/sa-contrib-2026-057","tags":["Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13237","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7c7x-54hv-3m8c"},{"url":"https://git.drupalcode.org/project/ai_agents","tags":["web"]},{"url":"https://www.drupal.org/project/ai_agents","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/13xxx/CVE-2026-13237.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-13237","title":"AI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057","description":"Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.","status":"published","published":"2026-07-10T21:44:43.053Z","modified":"2026-07-13T17:59:44.338Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:19:50.24628Z"}],"euvd":[{"id":"EUVD-2026-43061","description":"Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.","status":"published","published":"2026-07-10T21:44:43Z","modified":"2026-07-13T17:59:44Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:01.134466Z"}],"ghsa":[{"id":"GHSA-7c7x-54hv-3m8c","title":"Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue...","description":"Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.","status":"published","published":"2026-07-11T00:31:47Z","modified":"2026-07-13T18:30:34Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:09:25.900925Z"}],"nvd":[{"id":"CVE-2026-13237","description":"Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.","status":"published","published":"2026-07-10T22:16:39.797Z","modified":"2026-10-25T15:10:00.147Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:12:28.771746Z"}],"osv":[{"id":"CVE-2026-13237","title":"AI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057","description":"Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.","status":"published","published":"2026-07-10T21:44:43.053Z","modified":"2026-10-28T02:31:04.701715011Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:44:57.354194Z"},{"id":"DRUPAL-CONTRIB-2026-057","description":"This module provides the entity type and runtime for Drupal AI Agents, enabling agents to use tools.\n\nUnder certain circumstances, the agent inherits deterministic parameters when invoking the same tool in one request, which can lead to information disclosure.","status":"published","published":"2026-06-24T18:39:24Z","modified":"2026-09-10T03:45:05.810085952Z","updated_at":"2026-11-02T15:46:13.900249Z"}]}}