- Package
- drupal/ai
- Fixed in
- 1.4.11, 1.5.2
- Published
- Wed 28 Oct 2026, 17:08 LisbonUpdated Mon 2 Nov 2026, 08:25 Lisbon
In plain words
Under certain configurations, the AI Chatbot submodule does not sufficiently filter user input before displaying it, potentially allowing cross-site scripting (XSS). An attacker must have access to administer blocks.
Am I affected?
Look for drupal/ai and its version in composer.lock. The advisory lists fixes in 1.4.11 and 1.5.2 but gives no affected version range. Check whether your site uses the AI Chatbot submodule and who has access to administer blocks. The advisory does not identify which chatbot configurations are vulnerable.
What to do
Check which version you have, then update to a fixed release for your branch (1.4.11, 1.5.2):
composer show drupal/ai | grep versions
composer update drupal/aiIf your version constraint in composer.json keeps you below a fixed release, raise it first. Whether your configuration is affected, and the exact version ranges, are in the advisory itself.
If you cannot update yet
The advisory says the vulnerability is mitigated by the requirement that an attacker must have access to administer blocks.
The advisory's description
This module enables you to use AI on the website. It includes an AI Chatbot submodule allows you to setup a chatbot.
Under certain configurations, the chatbot does not sufficiently filter user input before rendering it, potentially allowing cross-site scripting (XSS).
This vulnerability is mitigated by the fact that an attacker must have access to administer blocks.