Auth bypass in Drupal Ai (Artificial Intelligence)

CVE-2025-31678

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.

Vulnerability class: Broken Access Control

EPSS: 0.004 (58.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References