The vulnerability identified as CVE-2026-13244 in Drupal Tealium iQ Tag Management involves improper control over modification of dynamically-determined object attributes, classified under CWE-915. This flaw enables object injection attacks, potentially allowing an attacker with network access and low privileges to compromise confidentiality and integrity of the affected system. The affected versions range from 0.0.0 up to 2.4.0. The CVSS v3.1 base score is 8.1, indicating high severity. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability can lead to high confidentiality and integrity impacts, allowing attackers to manipulate object attributes dynamically and inject malicious objects. Availability is not impacted. The vulnerability requires network access with low privileges and no user interaction is needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently provided, users should monitor the vendor's security advisories for updates. Restricting network access and limiting privileges may reduce exposure until a patch is available.