Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)
The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page record. It neither checks the user's permissions nor limits which fields can be changed. Any authenticated backend user can therefore change any property of any page, including its access permissions and configuration, outside the scope granted to them.
CVE-2026-112239
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-112239
Extension "TYPO3 AI Integration Extension"
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "TYPO3",
"product": "Extension \"TYPO3 AI Integration Extension\"",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "14.0.2",
"versionType": "semver"
}
],
"packageName": "nitsan/ns-t3ai",
"collectionURL": "https://packagist.org/",
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-112239
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #42293 · Revision 1
- Added to Heist Feed
- Publisher date