AI (Artificial Intelligence) vulnerabilities

5 known vulnerabilities in AI (Artificial Intelligence) from Drupal. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  AI (Artificial Intelligence): Improper Neutralization of Input During Web Page Generation

  CVE-2026-118549Oct 30, 2026Drupal

  Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.

• 7.5 High severity

  AI (Artificial Intelligence): Incorrect Authorization

  CVE-2026-3573Mar 26, 2026Drupal

  Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12.

• 7.5 High severity

  AI (Artificial Intelligence): Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-31692Mar 31, 2025Drupal

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.

• 8.2 High severity

  AI (Artificial Intelligence): Missing Authorization

  CVE-2025-31678Mar 31, 2025Drupal

  Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.

• 8.8 High severity

  AI (Artificial Intelligence): Cross-Site Request Forgery

  CVE-2025-31677Mar 31, 2025Drupal

  Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects AI (Artificial Intelligence): from 1.0.0 before 1.0.2.