CVE-2026-113459: Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)
In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service directly from the browser. Any authenticated backend user can read the key and use it at the expense of the site operator. This only applies if an API key has been configured.
Affected Software
Event History
Frequently Asked Questions
Who can access and misuse the exposed API key?
Any authenticated TYPO3 backend user can read the key from backend pages and use it at the site operator's expense. Unauthenticated visitors are not identified as able to access it.
When is an installation affected?
The issue applies to ns_t3ai installations running on TYPO3 10 or 11 only when an OpenAI API key has been configured. The configured key is embedded in every backend page.
What can be done if an update cannot be applied immediately?
Removing the configured OpenAI API key prevents this specific exposure. Because backend users can already read the key, the existing key should no longer be trusted for controlling usage at the operator's expense.