DRUPAL-CONTRIB-2026-273: Composer/drupal/ai vulnerability

Q: Who is realistically exposed to this issue?

Sites using the AI module's AI Automator submodule are exposed if users can author field data and AI Automator can populate those fields. The issue concerns users being able to use text formats they are not authorized to access.

Q: What access does an attacker need?

An attacker needs the ability to author field data through the affected functionality. The provided information does not indicate that unauthenticated exploitation is possible.

Q: How can I tell whether my site may be affected?

Check whether the AI module is installed and whether its AI Automator submodule is enabled. Then review whether users who can author fields could cause AI Automator to populate content using text formats not granted to their roles.

Published Oct 28, 2026

Updated

The AI module includes a submodule, AI Automator. This submodule allows you to automatically fill out fields using AI, based on other fields.

The module doesn't sufficiently check access to text formats, allowing users to author field data in text formats they should not have access to.

Affected Software

2 affected componentsFixes available

composer/drupal/ai<1.4.11

1.4.11

composer/drupal/ai>=1.5.0<1.5.2

1.5.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade composer/drupal/ai to a version that resolves this vulnerability.
Fixed in 1.4.11
Upgrade
Upgrade composer/drupal/ai to a version that resolves this vulnerability.
Fixed in 1.5.2

Event History

Oct 28, 2026

Advisory Published

via OSV·05:10 PM

Data Sourced

via OSV·05:10 PM

DescriptionAffected Software

Frequently Asked Questions

Who is realistically exposed to this issue?

Sites using the AI module's AI Automator submodule are exposed if users can author field data and AI Automator can populate those fields. The issue concerns users being able to use text formats they are not authorized to access.

What access does an attacker need?

An attacker needs the ability to author field data through the affected functionality. The provided information does not indicate that unauthenticated exploitation is possible.

How can I tell whether my site may be affected?

Check whether the AI module is installed and whether its AI Automator submodule is enabled. Then review whether users who can author fields could cause AI Automator to populate content using text formats not granted to their roles.

DRUPAL-CONTRIB-2026-273: Composer/drupal/ai vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What access does an attacker need?

How can I tell whether my site may be affected?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What access does an attacker need?

How can I tell whether my site may be affected?