{"id":"CVE-2026-118551","kind":"vulnerability","aliases":["CVE-2026-118551"],"related":[],"title":"Drupal AI module: insecure storage lets attackers retrieve embedded sensitive data","description":"Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.","summary":"The Drupal AI (Artificial Intelligence) module stores sensitive information insecurely, so data embedded for AI use can be retrieved. An attacker who can reach that stored data can read sensitive content the site holds.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-module","ai-tooling","drupal","php"],"not_affected_if":["module-not-installed"],"how_to_check":"- Check the installed version of the Drupal AI module (`drush pm:list --filter=ai` or the Extend page) and compare it to the affected range.\n- Confirm whether embeddings or AI provider credentials are stored in the site database.","fix":"- Move the AI module to a version after `1.5.2` or after `1.4.11` on its release line, as the affected range is `0.0.0` to `1.4.11` and `1.5.0` to `1.5.2`. The sources do not name the exact fixed version.","status":"open","published_at":"2026-10-30T04:18:20+00:00","first_seen_at":"2026-10-30T04:28:38+00:00","triaged_at":"2026-10-30T04:29:28+00:00","updated_at":"2026-10-30T04:29:28+00:00","category":"ai-tooling","confidence":0.5,"triage":{"at":"2026-10-30T04:29:28Z","model":"claude-haiku-5-5","output":{"fix":"- Move the AI module to a version after `1.5.2` or after `1.4.11` on its release line, as the affected range is `0.0.0` to `1.4.11` and `1.5.0` to `1.5.2`. The sources do not name the exact fixed version.","reach":"unknown","title":"Drupal AI module: insecure storage lets attackers retrieve embedded sensitive data","impact":"medium","summary":"The Drupal AI (Artificial Intelligence) module stores sensitive information insecurely, so data embedded for AI use can be retrieved. An attacker who can reach that stored data can read sensitive content the site holds.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["drupal","php","ai-module"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"sensitive embedded data readable by attackers","analyst_note":"Check the NVD entry and the Drupal security advisory for the fixed version, required privileges and whether the attack is remote.","how_to_check":"- Check the installed version of the Drupal AI module (`drush pm:list --filter=ai` or the Extend page) and compare it to the affected range.\n- Confirm whether embeddings or AI provider credentials are stored in the site database.","plain_action":"","needs_analyst":true,"not_affected_if":["module-not-installed"],"who_is_affected":"Sites running the Drupal AI (Artificial Intelligence) module in the affected version ranges are exposed. Sites without the module, or running versions outside the listed ranges, are not affected. The sources do not say what level of access an attacker needs.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000716,"input_tokens":4136,"output_tokens":605,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-118551':14A,17A '-2026':13A,16A '0.0.0':84C '1.4.11':86C '1.5.0':88C '1.5.2':90C 'affect':78C 'ai':2A,19B,22B,28B,40B,68C,79C 'ai-modul':18B 'ai-tool':21B 'allow':71C 'artifici':29B,69C,80C 'attack':7A,46B 'content':56B 'cve':12A,15A 'data':11A,37B,52B,75C 'drupal':1A,24B,27B,67C 'embed':9A,38B,73C 'hold':59B 'inform':34B,64C 'insecur':4A,35B,60C 'intellig':30B,70C,81C 'issu':77C 'let':6A 'modul':3A,20B,31B 'php':25B 'reach':49B 'read':54B 'retriev':8A,44B,72C 'sensit':10A,33B,55B,63C,74C 'site':58B 'storag':5A,61C 'store':32B,51B 'tool':23B 'use':41B 'version':82C 'vulner':65C","nicknames":[],"mitigations":[],"who_affected":"Sites running the Drupal AI (Artificial Intelligence) module in the affected version ranges are exposed. Sites without the module, or running versions outside the listed ranges, are not affected. The sources do not say what level of access an attacker needs.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T04:18:20+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118551","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118551","severity":null,"published_at":"2026-10-30T04:18:20+00:00","modified_at":"2026-10-30T04:18:20+00:00","first_seen_at":"2026-10-30T04:28:38+00:00","fetched_at":"2026-10-30T04:28:38+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}