{"id":"CVE-2026-81163","title":"Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129","summary":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Library Importer versions: from 0.0.0 to 2.1.6.","severity":"none","cwe":["CWE-22"],"vendor":"Drupal","product":"Media Library Importer","affected":["media_library_importer >= 0.0.0 < 2.1.6"],"published":"2026-10-22","updated":"2026-10-22","sourceUpdated":"2026-10-22T01:22:09.449Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-81163","references":[{"url":"https://www.drupal.org/sa-contrib-2026-129"}],"tags":["cve.org"],"ingestedAt":"2026-10-22T02:23:25.191Z","slug":"CVE-2026-81163","body":"## Overview\n\nImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Library Importer versions: from 0.0.0 to 2.1.6.\n\n## Affected\n\n- `media_library_importer >= 0.0.0 < 2.1.6`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}