CVE-2026-114554: AI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251
Published Oct 30, 2026
·Updated
Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful Browsing. This issue affects AI File to Text versions: from 0.0.0 to 1.0.1.
Affected Software
1 affected component
Drupal AI File to Text>=0.0.0<=1.0.1
Event History
Oct 30, 2026
CVE Published
via MITRE·03:09 AM
Data Sourced
via MITRE·03:09 AM
DescriptionWeakness
Data Sourced
via OSV·03:09 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:18 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Drupal sites using the AI File to Text module in versions from 0.0.0 through 1.0.1 are affected.
2
What type of access could an attacker gain?
The vulnerability is an incorrect authorization issue that allows forceful browsing, meaning an attacker may bypass intended access controls by directly requesting resources or paths.