This module enables you to use AI on the website. The module does not sufficiently restrict HTML rendering, allowing cross-site scripting (XSS) under certain c... (CVE-2026-118545)

Package: drupal/ai
Fixed in: 1.4.11, 1.5.2
Published: Wed 28 Oct 2026, 17:08 LisbonUpdated Mon 2 Nov 2026, 07:26 Lisbon

In plain words

The drupal/ai module does not sufficiently restrict HTML rendering, allowing cross-site scripting (XSS) under certain conditions. An attacker must have access to a text format that can render HTML.

Am I affected?

Look for drupal/ai and its installed version in composer.lock. The advisory lists fixes in 1.4.11 and 1.5.2, but gives no affected version range. Check whether an attacker could access a text format that can render HTML.

What to do

Check which version you have, then update to a fixed release for your branch (1.4.11, 1.5.2):

composer show drupal/ai | grep versions
composer update drupal/ai

If your version constraint in composer.json keeps you below a fixed release, raise it first. Whether your configuration is affected, and the exact version ranges, are in the advisory itself.

If you cannot update yet

The vulnerability is mitigated by the requirement that an attacker must have access to a text format that can render HTML.

The advisory's description

This module enables you to use AI on the website.

The module does not sufficiently restrict HTML rendering, allowing cross-site scripting (XSS) under certain conditions.

This vulnerability is mitigated by the fact that an attacker must have access to a text format that can render HTML.

The advisory

From OSV.dev, which gathers the GitHub Advisory Database, FriendsOfPHP and Drupal security advisories; the summary is theirs. The description is OSV's record of the advisory. "In plain words", "Am I affected?" and "If you cannot update yet" are based on that advisory, and checked to name no version it does not.