CVE-2026-12535

The vulnerability in Drupal's Formatter Field allows for improper control over dynamically-determined object attributes, leading to potential object injection attacks. This critical flaw, affecting versions 0.0.0 to 2.0.0, could enable an attacker to manipulate object attributes, compromising the integrity and security of the application. Organizations using affected versions should prioritize immediate remediation to mitigate the risk of exploitation.