CVE-2009-4558: The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x...

Security readout for executives and security teams

CVE-2009-4558 is an information disclosure issue in Drupal’s Image Assist module. A remote attacker may be able to view the title or body of arbitrary Drupal nodes when the module fails to enforce required privileges on unspecified pages. Public sources do not provide CVSS severity or detailed affected deployments. Exposure is most likely in legacy Drupal 5 or Drupal 6 sites that still run affected Image Assist versions. Modern sites are only relevant if they retained old code, migrated vulnerable module logic, or host archived legacy Drupal instances. Treat this as a legacy exposure check rather than an emergency unless affected Drupal installations are internet-facing and contain sensitive node content. Prioritize rapid inventory because old Drupal sites are often poorly tracked and may still expose business data. Mitigation focus: Identify any Drupal sites using the Image Assist module.; Upgrade Image Assist beyond the affected versions named in the CVE.; Check the Drupal advisory for current vendor guidance and replacement recommendations..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.