Live › vulnerability › CVE-2026-118548
The Drupal AI module does not sufficiently validate links under certain conditions. When it renders HTML built from untrusted content, sensitive information can be exfiltrated to external sites. Drupal rates it moderately critical (11/25), with exploit maturity theoretical.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 04:28 UTC. All times on this page are UTC.
Drupal sites with the AI (Artificial Intelligence) module enabled that show AI output rendered as HTML built from untrusted sources (user content, external pages). Drupal notes an attacker must get untrusted content into AI interactions that produce rendered HTML, so attack complexity is high. Sites without the module, or that never render AI output from untrusted input, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| drupal/ai | packagist | < 1.4.11, >= 1.5.0 < 1.5.2 | 1.4.11, 1.5.2 |
composer show drupal/ai or and compare the versiondrush pm:list --filter=ai1.4.11, or from 1.5.0 up to but not including 1.5.2 (1.3.x and older are affected and unsupported)1.5.2, 1.4.x to 1.4.111.5.2 or 1.4.11Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-118548")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.