CVE-2026-3573: Artificial Intelligence Project Artificial Intelligence

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12.

Affected products

• Artificial Intelligence Project Artificial Intelligence: before 1.1.11 (fixed in 1.1.11); from 1.2.0, before 1.2.12 (fixed in 1.2.12)

Published 2026-03-26. Last modified 2026-06-17.