Private AI Provider CVE-2026-87936

The vulnerable amazee.ai Private AI Provider module (versions 0.0.0 through 1.3.7, or 1.4.0 through 1.4.3) must be installed and enabled on a Drupal site. Per the CVSS vector the vector is remote and requires no privileges (PR:N) and no user interaction (UI:N), but the vector rates attack complexity as high (AC:H) and the specific feature, endpoint, or input parameter that carries the injection is not described in the available sources, so the precise trigger condition cannot be confirmed. Limiting factors: this is a contrib module that most Drupal sites do not install, bounding exposure to the subset running affected versions; and the unauthenticated (PR:N) claim is taken from the CVSS vector only and is not corroborated by the description, which many Drupal contrib SQLi issues would qualify with a required permission.

This is a medium-severity SQL injection (CWE-89, base CVSS 6.5) in the amazee.ai Private AI Provider Drupal contrib module. The supplied CVSS vector (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N) indicates a network-reachable, nominally unauthenticated flaw whose primary consequence is confidentiality loss (C:H) with only limited integrity impact and no availability impact - consistent with an attacker reading database contents rather than fully taking over the system. The exploitation signals argue against treating this as an emergency: EPSS is only 0.17% (6th percentile), the CVE is NOT on CISA KEV, and no public exploit or PoC reference is present beyond the vendor advisory. The vuln.today decision label is 'this_month' (not act_now/emergency), aligning with 'patch on your normal cycle' rather than drop-everything urgency. Two points warrant verification: (1) the vector asserts AC:H but the description gives no trigger detail, so the basis for high attack complexity is not stated in the available sources; and (2) the vector asserts PR:N (unauthenticated), yet many Drupal contrib SQLi flaws require an account with a specific permission - authentication requirement is taken from the CVSS vector only and is not independently confirmed by the description. Net: a real but non-urgent, data-disclosure-focused issue in a niche module; prioritize patching this month.

An attacker who can reach a Drupal site running a vulnerable amazee.ai Private AI Provider version (0.0.0-1.3.7 or 1.4.0-1.4.3) submits input to the affected module feature that is concatenated into a backend SQL query, injecting their own SQL to read sensitive rows from the Drupal database. Per the CVSS vector the vector is network-based and requires no privileges, though the vector also rates attack complexity as high; the specific injectable parameter and the reason for that complexity are not described in the available sources. No public exploit code or PoC reference is present at the time of analysis.