PT-2026-107754 · Packagist · Drupal/Gutenberg

CVE-2026-107263

·

Published

2026-10-07

·

Updated

2026-10-07

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
This module provides a new UI experience for node editing using the Gutenberg Editor library.
The module does not sufficiently check entity access in several editor endpoints.
This vulnerability is mitigated by the fact that an attacker must have a role with the “use gutenberg” permission.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-107263
DRUPAL-CONTRIB-2026-202

Affected Products

Drupal/Gutenberg