CVE-2026-114554

Drupal AI File to Text bypasses file-view permission

Drupal maintainers · AI File to Text tool

First documented disclosure · Review checkpoint

Summary

AI extraction can reveal files the caller cannot download.

Severity and exploitation evidence

Unknown · numeric CVSS score not recorded. Severity source.

Exploitation not established: Drupal labels exploitation theoretical; reviewed sources establish neither malicious exploitation nor a confirmed victim.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The tool extracts document contents without sufficiently checking the invoking user’s file-view permission.

Conditions required

A role permitted to invoke AI tools, for example through an agent or AI API Explorer.

Potential impact

Disclosure of inaccessible document contents, including files in private storage.

Affected versions and configurations

AI File to Text before 1.0.1.

Fix and mitigation status

AI File to Text 1.0.1.

Practical next steps

Upgrade and restrict AI extraction tools until the caller’s file permissions are enforced.

Operating lesson

A tool’s service account access must not replace the requesting user’s file authorization.

Evidence and limits

The vendor advisory was public 2026-10-21; October 30 is later CNA publication. Drupal rates this Moderately critical 11/25 under its own risk system, not CVSS; no numeric CVSS is inferred.

Sources