This AI module enables you to interact with AI providers. It has a service that helps any consumer of the module to stop cross site scripting elements from appe... (CVE-2026-118549)

Package: drupal/ai
Fixed in: 1.4.11, 1.5.2
Published: Wed 28 Oct 2026, 17:09 LisbonUpdated Mon 2 Nov 2026, 07:26 Lisbon

In plain words

The Drupal AI module does not sufficiently validate Markdown links under certain conditions. This could allow an attacker to cause cross-site scripting (XSS) despite the module's service for preventing it.

Am I affected?

Find drupal/ai and its version in composer.lock. The advisory lists fixes in 1.4.11 and 1.5.2, but gives no affected version range. Check whether your project uses the module's service for preventing XSS with Markdown links; the advisory does not specify the conditions that trigger the flaw, so it does not provide enough detail to rule out exposure.

What to do

Check which version you have, then update to a fixed release for your branch (1.4.11, 1.5.2):

composer show drupal/ai | grep versions
composer update drupal/ai

If your version constraint in composer.json keeps you below a fixed release, raise it first. Whether your configuration is affected, and the exact version ranges, are in the advisory itself.

The advisory's description

This AI module enables you to interact with AI providers. It has a service that helps any consumer of the module to stop cross site scripting elements from appearing.

The module does not sufficiently validate Markdown links under certain conditions, potentially allowing cross-site scripting (XSS).

The advisory

From OSV.dev, which gathers the GitHub Advisory Database, FriendsOfPHP and Drupal security advisories; the summary is theirs. The description is OSV's record of the advisory. "In plain words", "Am I affected?" and "If you cannot update yet" are based on that advisory, and checked to name no version it does not.