What is the CVSS score of CVE-2026-13236?

CVE-2026-13236 has a CVSS 3.1 base score of 4.2 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2026-13236?

Yes, a patch is available for CVE-2026-13236. Update the affected software to the latest version immediately.

Drupal AI Agents CVE-2026-13236

EUVD-2026-43060 MEDIUM

Missing Authorization (CWE-862)

2026-07-10 drupal

GHSA-vqr6-3h85-q7hp

Authentication Bypass Drupal Ai Agents

4.2

CVSS 3.1 · Vendor: drupal

Severity by source

Vendor (drupal) PRIMARY

4.2 MEDIUM

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

vuln.today AI

4.2 MEDIUM

Network-reachable but requires authenticated low-privilege account and non-trivial endpoint knowledge; no availability impact from authorization bypass alone.

3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

4.0 AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (drupal).

CVSS VectorVendor: drupal

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 13, 2026 - 21:17 vuln.today

Severity Changed

Jul 13, 2026 - 19:22 NVD

CRITICAL MEDIUM

CVSS changed

Jul 13, 2026 - 19:22 NVD

9.8 (CRITICAL) 4.2 (MEDIUM)

CVSS changed

Jul 13, 2026 - 19:07 NVD

9.8 (CRITICAL)

Patch available

Jul 10, 2026 - 23:02 EUVD

CVE Published

Jul 10, 2026 - 21:44 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.

AnalysisAI

Missing authorization controls in the Drupal AI Agents contrib module expose protected resources to forceful browsing by authenticated low-privilege users. Affected installations span three version branches - 0.0.0 through 1.1.3, 1.2.0 through 1.2.4, and 1.3.0 - across the Drupal ecosystem. No public exploit has been identified and CISA has not added this to KEV; EPSS at 0.14% (4th percentile) and SSVC's 'none' exploitation status confirm minimal real-world threat at time of analysis.

Technical ContextAI

The Drupal AI Agents module (cpe:2.3:a:drupal:ai_agents:*:*:*:*:*:*:*:*) is a contributed Drupal extension that integrates AI agent workflows into the Drupal CMS platform. CWE-862 (Missing Authorization) describes a pattern where application code performs an operation without verifying that the requesting party has permission to do so. In this case, the specific manifestation is forceful browsing - a technique where an attacker directly navigates to URLs or endpoints that are not linked in the normal UI flow, bypassing access control gates that rely on UI-enforced navigation rather than server-side authorization checks. The root cause is the absence of server-side permission verification before serving protected content or functionality within the AI Agents module routes.

RemediationAI

Drupal has released patched versions for all affected branches. Sites running the 0.x-1.1.x branch should upgrade to 1.1.4 or later; sites on the 1.2.x branch should upgrade to 1.2.5 or later; sites on the 1.3.x branch should upgrade to 1.3.1 or later. The authoritative remediation advisory is published at https://www.drupal.org/sa-contrib-2026-056. If an immediate upgrade is not feasible, a compensating control is to restrict access to the Drupal site to trusted authenticated users only, reducing the pool of accounts that could perform forceful browsing. Alternatively, disabling the AI Agents module entirely eliminates exposure until patching is possible, though this removes the module's functionality. There are no known workarounds that preserve full module functionality while mitigating the vulnerability.