CVE-2026-0945

High · 8.8

CVSS

8.8

EPSS

0.2%

Published

Feb 4, 2026

CISA due date

—

The record

Privilege Defined With Unsafe Actions vulnerability in Drupal Role Delegation allows Privilege Escalation.This issue affects Role Delegation: from 1.3.0 before 1.5.0.

Affected packages

Ecosystem	Package	Introduced	Fixed
Packagist:https://packages.drupal.org/8	drupal/role_delegation	1.3.0	1.5.0

Related vulnerabilities

DRUPAL-CONTRIB-2026-002 This module allows site administrators to grant specific roles the authority to assign… Same vulnerability