CVE-2025-8996: Layout Builder Advanced Permissions Project Layout Builder Advanced Permissions

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue affects Layout Builder Advanced Permissions: from 0.0.0 before 2.2.0.

Affected products

• Layout Builder Advanced Permissions Project Layout Builder Advanced Permissions: before 2.2.0 (fixed in 2.2.0)

Published 2025-08-15. Last modified 2026-06-17.