{"self":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-13237","first":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-13237\u0026page=0","last":"https:\/\/www.drupal.org\/api-d7\/node?field_sa_cve=CVE-2026-13237\u0026page=0","list":[{"field_issue_status":"7","field_project":{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3471208","id":"3471208","resource":"node"},"field_sa_advisory_id":"057","field_sa_coordinated_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/bramdriesen\u0022 rel=\u0022nofollow\u0022\u003EBram Driesen (bramdriesen)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/greggles\u0022 rel=\u0022nofollow\u0022\u003EGreg Knaddison (greggles)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/mcdruid\u0022 rel=\u0022nofollow\u0022\u003EDrew Webber (mcdruid)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/poker10\u0022 rel=\u0022nofollow\u0022\u003EJuraj Nemec (poker10)\u003C\/a\u003E of the Drupal Security Team\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_criticality":"AC:Complex\/A:None\/CI:Some\/II:Some\/E:Theoretical\/TD:Uncommon","field_sa_description":{"value":"\u003Cp\u003EThis module provides the entity type and runtime for Drupal AI Agents, enabling agents to use tools.\u003C\/p\u003E\n\u003Cp\u003EUnder certain circumstances, the agent inherits deterministic parameters when invoking the same tool in one request, which can lead to information disclosure.\u003C\/p\u003E","format":"1"},"field_sa_fixed_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/andrewbelcher\u0022 rel=\u0022nofollow\u0022\u003EAndrew Belcher (andrewbelcher)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/marcus_johansson\u0022 rel=\u0022nofollow\u0022\u003EMarcus Johansson (marcus_johansson)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/rob_e\u0022 rel=\u0022nofollow\u0022\u003ERob Edwards (rob_e)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_reported_by":{"value":"\u003Cul\u003E\n\u003Cli\u003E\u003Ca href=\u0022\/u\/andrewbelcher\u0022 rel=\u0022nofollow\u0022\u003EAndrew Belcher (andrewbelcher)\u003C\/a\u003E\n\u003C\/li\u003E\u003Cli\u003E\u003Ca href=\u0022\/u\/rob_e\u0022 rel=\u0022nofollow\u0022\u003ERob Edwards (rob_e)\u003C\/a\u003E\n\u003C\/li\u003E\u003C\/ul\u003E","format":"1"},"field_sa_solution":{"value":"\u003Cp\u003EInstall the latest version:\u003C\/p\u003E\n\u003Cul\u003E\n\u003Cli\u003EIf you use the AI Agents module 1.1.3, upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/ai_agents\/releases\/1.1.4\u0022 rel=\u0022nofollow\u0022\u003EAI Agents 1.1.4\u003C\/a\u003E\u003C\/li\u003E\n\u003Cli\u003EIf you use the AI Agents module 1.2.4 upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/ai_agents\/releases\/1.2.5\u0022 rel=\u0022nofollow\u0022\u003EAI Agents 1.2.5\u003C\/a\u003E\u003C\/li\u003E\n\u003Cli\u003EIf you use the AI Agents module 1.3.0 upgrade to \u003Ca href=\u0022https:\/\/www.drupal.org\/project\/ai_agents\/releases\/1.3.1\u0022 rel=\u0022nofollow\u0022\u003EAI Agents 1.3.1\u003C\/a\u003E\u003C\/li\u003E\n\u003C\/ul\u003E","format":"1"},"field_sa_type":"Information disclosure, Access bypass","field_issue_last_status_change":"1782326364","field_sa_cve":["CVE-2026-13237"],"field_is_psa":"0","field_affected_versions":"\u003C1.1.4 || \u003E=1.2.0 \u003C1.2.5 || \u003E=1.3.0 \u003C1.3.1","field_fixed_in":[{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3605835","id":"3605835","resource":"node"},{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3605836","id":"3605836","resource":"node"},{"uri":"https:\/\/www.drupal.org\/api-d7\/node\/3605837","id":"3605837","resource":"node"}],"nid":"3605528","vid":"14405406","is_new":false,"type":"sa","title":"AI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057","language":"en","url":"https:\/\/www.drupal.org\/sa-contrib-2026-057","edit_url":"https:\/\/www.drupal.org\/node\/3605528\/edit","status":"1","promote":"0","sticky":"0","created":"1782326364","changed":"1782326364","author":{"uri":"https:\/\/www.drupal.org\/api-d7\/user\/406161","id":"406161","resource":"user","name":"Drupal Security Team"},"comment":"0","comments":[{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16657002","id":16657002,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16657003","id":16657003,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16657004","id":16657004,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16657005","id":16657005,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16657006","id":16657006,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16657007","id":16657007,"resource":"comment"},{"uri":"https:\/\/www.drupal.org\/api-d7\/comment\/16657135","id":16657135,"resource":"comment"}],"comment_count":0,"comment_count_new":false,"body":[],"feeds_item_guid":null,"feeds_item_url":null,"feed_nid":null,"flag_flag_tracker_follow_user":[],"flag_tracker_follower_count":null,"has_new_content":null,"last_comment_timestamp":"1782326364"}]}