This vulnerability in the Drupal Clean RESTful module is classified under CWE-287, indicating an authentication or authorization issue. The CVSS 3.1 base score is 5.9, reflecting a medium severity with network attack vector, high attack complexity, requiring high privileges, no user interaction, and impacts confidentiality and integrity. The vulnerability affects all versions of the Clean RESTful module, but no remediation or patch information is currently available. The issue was published on July 10, 2026, and no known exploits have been reported.

Successful exploitation could lead to unauthorized access or modification of sensitive data within the Drupal Clean RESTful module, impacting confidentiality and integrity. Availability is not affected. The attack requires high privileges and has high complexity, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is provided, monitor the Drupal security advisories for updates and apply any patches once available. Until then, restrict access to the affected module to trusted users with high privileges.