CVE-2025-31677: Drupal AI Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery. This issue affects AI (Artificial Intelligence): from 1.0.0 before 1.0.2.
Other sources
Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects AI (Artificial Intelligence): from 1.0.0 before 1.0.2.
— MITRE
Drupal AI Cross-Site Request Forgery (CSRF) vulnerability
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/drupal/aito a version that resolves this vulnerability.Fixed in 1.0.2
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31677?
CVE-2025-31677 is classified as a critical severity vulnerability due to its potential for exploit through Cross-Site Request Forgery.
How do I fix CVE-2025-31677?
To fix CVE-2025-31677, update your Drupal AI installation to version 1.0.2 or later.
What versions are affected by CVE-2025-31677?
CVE-2025-31677 affects Drupal AI versions from 1.0.0 before 1.0.2.
What type of vulnerability is CVE-2025-31677?
CVE-2025-31677 is a Cross-Site Request Forgery (CSRF) vulnerability.
What impact does CVE-2025-31677 have on affected systems?
CVE-2025-31677 can allow attackers to perform unauthorized actions on behalf of authenticated users.