SA-CONTRIB-2026-268: Critical severity composer/drupal/ai vulnerability
This module enables you to use AI on the website. It also enables you to interact with AI providers. The module does not sufficiently validate links under certain conditions, potentially allowing the exfiltration of sensitive information to external sites. This vulnerability is mitigated by the fact that an attacker must use untrusted sources when interacting with the AI module in a way that produces rendered HTML.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/drupal/aito a version that resolves this vulnerability.Fixed in 1.5.2Fixed in 1.4.11Fixed in 1.5.2Fixed in 1.4.11
Event History
Frequently Asked Questions
Which deployments are most exposed to this issue?
Deployments using the AI module are exposed when they process untrusted sources through an AI interaction that produces rendered HTML. The described impact is potential exfiltration of sensitive information to external sites.
What conditions are required for exploitation?
An attacker must be able to use untrusted sources in an interaction with the AI module and cause that interaction to produce rendered HTML. The available information does not identify any other required access level or configuration condition.