CVE-2026-13233: Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issu
mediumvulnerabilityLLM-Specific
security
Summary
CVE-2026-13233 is a server-side request forgery (SSRF, a vulnerability that tricks a server into making unwanted requests to other systems) vulnerability in the Drupal OpenAI Provider module that affects versions 0.0.0 through 1.1.1 and 1.2.0 through 1.2.2. The vulnerability allows attackers to exploit this flaw, though specific attack details are not provided in this summary.
Vulnerability Details
EPSS (30-day exploit probability)
EPSS: 0.0%
Disclosure Date
July 10, 2026
Classification
Attack Type
Other
Attack SophisticationModerate
Impact (CIA+S)
confidentialityintegrity
Affected Vendors
OpenAI
Related Issues
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-13233
First tracked: July 10, 2026 at 08:07 PM
Classified by LLM (prompt v3) · confidence: 75%