PatchClock

PHP security digest · 23 Sep 2026

This module enables you to use AI to fill in or replace text in CKEditor. The module doesn't sufficiently mitigate Twig template injections in certain AI CKEdi...

Unrated CVE-2026-96392

Package
drupal/ai_ckeditor
Fixed in
1.4.3
Published
Wed 23 Sep 2026, 18:20 LisbonUpdated Mon 26 Oct 2026, 02:25 Lisbon

In plain words

Certain AI CKEditor rules do not sufficiently prevent Twig template injection. An attacker could use this flaw to extract confidential system data through Twig functions.

Am I affected?

Check composer.lock for drupal/ai_ckeditor and its installed version. The advisory lists 1.4.3 as fixed but gives no affected version range. Review your use of AI CKEditor rules, though the advisory does not identify which rules are vulnerable.

What to do

Check which version you have, then update to a fixed release for your branch (1.4.3):

composer show drupal/ai_ckeditor | grep versions
composer update drupal/ai_ckeditor

If your version constraint in composer.json keeps you below a fixed release, raise it first. Whether your configuration is affected, and the exact version ranges, are in the advisory itself.

The advisory's description

This module enables you to use AI to fill in or replace text in CKEditor.

The module doesn't sufficiently mitigate Twig template injections in certain AI CKEditor rules, making it possible to use Twig functions to extract certain confidential system data.

The advisory

From OSV.dev, which gathers the GitHub Advisory Database, FriendsOfPHP and Drupal security advisories; the summary is theirs. The description is OSV's record of the advisory. "In plain words", "Am I affected?" and "If you cannot update yet" are based on that advisory, and checked to name no version it does not.