CVE-2026-58590

The FlowDrop module for Drupal (versions 0.0.0 through 1.6.0) is susceptible to a Missing Authorization vulnerability that allows for Forceful Browsing . The root cause is the module's failure to sufficiently re-evaluate human-in-the-loop approval gates when a workflow iterates more than once. Th...