The AI File to Text module extracts text from uploaded documents, including Word, PDF, OpenDocument, CSV, Markdown and plain text files, and exposes that extr...

The AI File to Text module can disclose a file’s contents without properly checking whether the user is allowed to view it. This includes files the user cannot otherwise download, including files in the private file system. An attacker must have a role with permission to invoke AI tools, for example through an agent or the AI API Explorer.

Look for drupal/ai_file_to_text and its installed version in composer.lock. The advisory lists 1.0.1 as fixed but gives no affected version range. Check which roles have permission to invoke AI tools, including through agents or the AI API Explorer, and whether files users should not be able to view are present, including in the private file system.

The advisory says the vulnerability is mitigated by the requirement that an attacker have a role with permission to invoke AI tools, for example through an agent or the AI API Explorer.

The AI File to Text module extracts text from uploaded documents, including
Word, PDF, OpenDocument, CSV, Markdown and plain text files, and exposes that extraction to AI agents and automators as a tool.

The module does not sufficiently check whether the current user is permitted
to view a file before extracting its contents. This allows the contents of files the user could not otherwise download, including files held in the private file system,
to be disclosed.

This vulnerability is mitigated by the fact that an attacker must have a role
with permission to invoke AI tools, for example through an agent or the AI API
Explorer.