Project: 
Entity PDF
Date: 
2026-August-26
Security risk: 
Moderately critical 13 ∕ 25 AC:None/A:User/CI:Some/II:None/E:Theoretical/TD:All
Vulnerability: 
Access bypass
Affected versions: 
<2.1.5
CVE IDs: 
CVE-2026-81164
Description: 

The Entity PDF module can create a PDF from any entity based on any View mode.

This module does not check entity view access when fetching a PDF route. This could result in a user accessing a PDF of an entity that they should not be able to view.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: