- Package
- drupal/ai
- Fixed in
- 1.4.11, 1.5.2
- Published
- Wed 28 Oct 2026, 17:09 LisbonUpdated Mon 2 Nov 2026, 07:27 Lisbon
In plain words
The Drupal AI module does not sufficiently validate links under certain conditions. This could allow an attacker to send sensitive information to external sites when using untrusted sources in interactions with the module that produce rendered HTML.
Am I affected?
Look for drupal/ai and its version in composer.lock. The advisory lists fixes in 1.4.11 and 1.5.2 but gives no affected version range. Check whether interactions with the AI module use untrusted sources and produce rendered HTML, as these are the conditions named in the description.
What to do
Check which version you have, then update to a fixed release for your branch (1.4.11, 1.5.2):
composer show drupal/ai | grep versions
composer update drupal/aiIf your version constraint in composer.json keeps you below a fixed release, raise it first. Whether your configuration is affected, and the exact version ranges, are in the advisory itself.
If you cannot update yet
The advisory says the vulnerability is mitigated by the requirement that an attacker use untrusted sources when interacting with the AI module in a way that produces rendered HTML.
The advisory's description
This module enables you to use AI on the website. It also enables you to interact with AI providers.
The module does not sufficiently validate links under certain conditions, potentially allowing the exfiltration of sensitive information to external sites.
This vulnerability is mitigated by the fact that an attacker must use untrusted sources when interacting with the AI module in a way that produces rendered HTML.