CVE-2009-3442: The Meta tags (aka Nodewords) module before 6.x-1.1 for Drupal does not properly follow permissions during...

Security readout for executives and security teams

CVE-2009-3442 affects the Drupal Meta tags, also called Nodewords, module before 6.x-1.1. The module did not properly enforce permissions when node meta tags were assigned, potentially letting remote attackers obtain sensitive information through unspecified vectors. Exposure is most likely limited to legacy Drupal 6 sites that installed the Meta tags/Nodewords module and still run a version before 6.x-1.1. Sites without this module, or with later versions, are not indicated as affected by the provided sources. Treat this as a legacy exposure cleanup item unless affected public Drupal systems are confirmed. The business concern is unintended information disclosure from old site components, not a currently proven mass-exploitation emergency based on the provided evidence. Mitigation focus: Inventory Drupal sites for the Meta tags or Nodewords module.; Confirm whether any installed version is before 6.x-1.1.; Review the Drupal advisory links before applying remediation..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.