{"id":"CVE-2026-118548","kind":"vulnerability","aliases":["CVE-2026-118548"],"related":[],"title":"Drupal AI module: incorrect authorization allows resource injection","description":"Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.","summary":"The Drupal AI module does not sufficiently validate links under certain conditions. When it renders HTML built from untrusted content, sensitive information can be exfiltrated to external sites. Drupal rates it moderately critical (11/25), with exploit maturity theoretical.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"drupal/ai","fixed":["1.4.11","1.5.2"],"affected":"< 1.4.11, >= 1.5.0 < 1.5.2","ecosystem":"packagist"}],"ecosystems":[],"tags":["ai-module","ai-tooling","composer","drupal","php"],"not_affected_if":["module-not-installed","no-untrusted-input"],"how_to_check":"Run 'composer show drupal/ai' or 'drush pm:list --filter=ai' and compare the version. You are affected if it is below 1.4.11, or from 1.5.0 up to but not including 1.5.2 (1.3.x and older are affected and unsupported).","fix":"Upgrade the drupal/ai module: 1.5.x to 1.5.2, 1.4.x to 1.4.11. The 1.3.x branch is unsupported, so move to 1.5.2 or 1.4.11.","status":"open","published_at":"2026-10-30T04:18:19+00:00","first_seen_at":"2026-10-30T04:28:38+00:00","triaged_at":"2026-10-30T04:29:31+00:00","updated_at":"2026-10-30T04:30:44+00:00","category":"ai-tooling","confidence":0.85,"triage":{"at":"2026-10-30T04:29:31Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Drupal AI module: incorrect authorization allows resource injection","impact":"medium","summary":"The Drupal AI (Artificial Intelligence) module has an incorrect authorization flaw that allows resource injection. The sources do not say what an attacker can read or change once it is exploited.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["drupal","php","ai-module"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown; sources do not say what an attacker can access","analyst_note":"Find the Drupal security advisory for the AI module to confirm the fixed version, the attack preconditions and what resource injection exposes.","how_to_check":"- Check whether the Drupal AI module is installed and its version, for example with `drush pm:list --filter=ai` (unknown if the sources do not say this is the right check)\n- Confirm whether the installed version falls in the affected range: from `0.0.0` to `1.4.11`, or `1.5.0` to `1.5.2`","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Sites running the Drupal AI (Artificial Intelligence) module in the affected version ranges. The sources do not say which features or configurations make a site exposed, so the exact exposure is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000671,"input_tokens":4114,"output_tokens":520,"severity_before":"unknown"},"analyst_status":"done","analyst_note":"Find the Drupal security advisory for the AI module to confirm the fixed version, the attack preconditions and what resource injection exposes.","search":"'-118548':11A,14A '-2026':10A,13A '0.0.0':82C '1.4.11':84C '1.5.0':86C '1.5.2':88C '11/25':58B 'affect':76C 'ai':2A,17B,20B,27B,68C,77C 'ai-modul':16B 'ai-tool':19B 'allow':6A,71C 'artifici':69C,78C 'author':5A,64C 'built':41B 'certain':35B 'compos':22B 'condit':36B 'content':44B 'critic':57B 'cve':9A,12A 'drupal':1A,23B,26B,53B,67C 'drupal/ai':15A 'exfiltr':49B 'exploit':60B 'extern':51B 'html':40B 'incorrect':4A,63C 'inform':46B 'inject':8A,73C 'intellig':70C,79C 'issu':75C 'link':33B 'matur':61B 'moder':56B 'modul':3A,18B,28B 'php':24B 'rate':54B 'render':39B 'resourc':7A,72C 'sensit':45B 'site':52B 'suffici':31B 'theoret':62B 'tool':21B 'untrust':43B 'valid':32B 'version':80C 'vulner':65C","nicknames":[],"mitigations":[],"who_affected":"Drupal sites with the AI (Artificial Intelligence) module enabled that show AI output rendered as HTML built from untrusted sources (user content, external pages). Drupal notes an attacker must get untrusted content into AI interactions that produce rendered HTML, so attack complexity is high. Sites without the module, or that never render AI output from untrusted input, can skip it.","tier":"B","verified":{"fix":{"at":"2026-10-30T04:30:44Z","by":"analyst","doc":"https://www.drupal.org/sa-contrib-2026-268","run_id":1125},"products":{"at":"2026-10-30T04:30:44Z","by":"analyst","doc":"https://www.drupal.org/sa-contrib-2026-268","run_id":1125},"how_to_check":{"at":"2026-10-30T04:30:44Z","by":"analyst","doc":"https://www.drupal.org/sa-contrib-2026-268","run_id":1125},"who_affected":{"at":"2026-10-30T04:30:44Z","by":"analyst","doc":"https://www.drupal.org/sa-contrib-2026-268","run_id":1125}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T04:18:19+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118548","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118548","severity":null,"published_at":"2026-10-30T04:18:19+00:00","modified_at":"2026-10-30T04:18:19+00:00","first_seen_at":"2026-10-30T04:28:38+00:00","fetched_at":"2026-10-30T04:28:38+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-118548:1125","url":null,"severity":null,"published_at":"2026-10-30T04:30:44+00:00","modified_at":"2026-10-30T04:30:44+00:00","first_seen_at":"2026-10-30T04:30:44+00:00","fetched_at":"2026-10-30T04:30:44+00:00","note":"Read Drupal SA-CONTRIB-2026-268 (primary). Info disclosure via unvalidated links in AI-rendered HTML; fixed 1.4.11 / 1.5.2. Drupal rates moderately critical, theoretical exploit; no exploitation or PoC found."}],"documents":[{"id":21301,"url":"https://www.drupal.org/sa-contrib-2026-268","title":"SA-CONTRIB-2026-268: AI (Artificial Intelligence) - Information disclosure","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}