CVE-2026-81163: Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129
Published Oct 22, 2026
·Updated
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Library Importer versions: from 0.0.0 to 2.1.6.
Affected Software
0 affected components
Event History
Oct 22, 2026
CVE Published
via MITRE·01:22 AM
Data Sourced
via MITRE·01:22 AM
DescriptionWeakness
Frequently Asked Questions
1
Which installations are affected?
Media Library Importer versions from 0.0.0 through 2.1.6 are affected.
2
What weakness does this issue involve?
The issue is a path traversal weakness caused by improper limitation of a pathname to a restricted directory. It can allow traversal outside the intended directory restrictions.