Project: 
Allowed Languages
Project machine name: 
allowed_languages
Date: 
2026-November-04
Security risk: 
Less critical 7 ∕ 25 AC:Complex/A:User/CI:None/II:None/E:Theoretical/TD:All
Vulnerability: 
Access bypass
Affected versions: 
<2.0.3
CVE IDs: 
CVE-2026-122077
Description: 

The Allowed Languages module makes it possible to set restrictions on which content a user can edit based on language.

The module doesn't sufficiently protect against using a disallowed language during content creation. This is mitigated by the fact that the user must have access to create content in at least one language.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: