Drupal 7.25 Form API drupal_form_submit $form_state['programmed_bypass_access_check'] privileges management

A vulnerability, which was classified as critical, was found in ). This affects the function drupal_form_submit of the component Form API. Upgrading to version 7.26 eliminates this vulnerability. The upgrade is hosted for download at drupal.org. A possible mitigation has been published immediately after the disclosure of the vulnerability.