Extension "TYPO3 AI Integration Extension" vulnerabilities

2 known vulnerabilities in Extension "TYPO3 AI Integration Extension" from TYPO3. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Extension "TYPO3 AI Integration Extension": Insertion of Sensitive Information Into Sent Data

  CVE-2026-113459Oct 20, 2026TYPO3

  In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service directly from the browser. Any authenticated backend user can read the key and use it at the expen

• 7.2 High severity

  Extension "TYPO3 AI Integration Extension": Missing Authorization

  CVE-2026-112239Oct 20, 2026TYPO3

  The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page record. It neither checks the user's permissions nor limits which fields can be changed. Any authenticated backend user can therefore change any