This module provides a framework for integrating AI providers and features into Drupal. Audio for every speech-to-text request is written to the same file in t...

The module writes audio from every speech-to-text request to the same file in the temporary directory and leaves it there afterwards. An attacker with read access to that directory could obtain audio another user sent for transcription.

Look for drupal/ai and its version in composer.lock. The advisory lists fixes in 1.4.11 and 1.5.2, but gives no affected version range. Check whether your site uses speech-to-text and whether other users can read its temporary directory through server access, a module or custom code.

Restrict read access to the site's temporary directory, including access through shared hosting accounts, modules or custom code. Drupal core's system.temporary route only serves temporary files to the user who owns them.

This module provides a framework for integrating AI providers and features into Drupal.

Audio for every speech-to-text request is written to the same file in the temporary directory and does not delete it afterwards. As a result, an attacker who can read the site's temporary directory could get the audio that another user sent for transcription.

This vulnerability is mitigated by the fact that the attacker needs read access to the temporary directory, either through the server (for example a shared hosting account) or through a module or custom code that exposes temporary files to other users. Drupal core's system.temporary route only serves temporary files to the user who owns them.