CVE-2026-84913

Name of the Vulnerable Software and Affected Versions Drupal AI Translate versions 0.0.0 through 1.3.2 Drupal AI Translate versions 1.4.0 through 1.4.1

Description An authorization flaw allows forceful browsing within the module used for automatic entity translation. The system fails to sufficiently verify access permissions for the entity being translated, its related fields, or referenced entities when performing an AI translation, particularly when these components have different access levels than the parent entity. This results in a permission bypass limited strictly to the translation operation, without granting unauthorized read or update access to the affected entities.

Recommendations Update Drupal AI Translate versions 0.0.0 through 1.3.2 to a secure version. Update Drupal AI Translate versions 1.4.0 through 1.4.1 to a secure version.