---
id: CVE-2026-81163
title: >-
  Media Library Importer - Moderately critical - Access bypass -
  SA-CONTRIB-2026-129
summary: >-
  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
  vulnerability in Drupal Media Library Importer allows Path Traversal. This
  issue affects Media Library Importer versions: from 0.0.0 to 2.1.6.
severity: none
cwe:
  - CWE-22
vendor: Drupal
product: Media Library Importer
affected:
  - media_library_importer >= 0.0.0 < 2.1.6
published: '2026-10-22'
updated: '2026-10-22'
sourceUpdated: '2026-10-22T01:22:09.449Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-81163'
references:
  - url: 'https://www.drupal.org/sa-contrib-2026-129'
tags:
  - cve.org
ingestedAt: '2026-10-22T02:23:25.191Z'
---

## Overview

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Library Importer versions: from 0.0.0 to 2.1.6.

## Affected

- `media_library_importer >= 0.0.0 < 2.1.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.