DRUPAL-CONTRIB-2026-210: SmartLinker AI - Moderately critical - Information disclosure - SA-CONTRIB-2026-210
Published Oct 30, 2026
·Updated
Incorrect Authorization vulnerability in Drupal SmartLinker AI allows Forceful Browsing. This issue affects SmartLinker AI versions: from 0.0.0 to 1.0.3.
Event History
Oct 30, 2026
CVE Published
via OSV·03:10 AM
Data Sourced
via OSV·03:10 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs low-level privileges to exploit the vulnerability. The vector is network-accessible and does not require user interaction.
2
What versions are affected?
SmartLinker AI versions from 0.0.0 through 1.0.3 are affected.
3
What is the impact if exploited?
Successful exploitation can disclose information. The provided severity vector indicates no integrity or availability impact.