Live › vulnerability › CVE-2026-84913
Go to dashboardAI Translate, a Drupal module, lacks an access check on some routes, so a user can reach functions they should not. The sources do not say which data or actions are exposed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running Drupal with the AI Translate module at versions up to and including 1.3.2, or 1.4.0 through 1.4.1. The sources do not say which roles or configurations make a site exposed. Sites without this module can skip it.
No product ranges from the sources yet.
ai_translate version with composer show drupal/ai_translate or the module's info filedrupal/ai_translate to a version later than 1.4.1 or 1.3.2, per the vendor advisoryEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-84913")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.