EUVD-2026-43057
GHSA-65px-3fq7-92h3
Severity by source
AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
Admin credentials required (PR:H) and complex preconditions (AC:H); SSRF yields only partial internal resource access with no availability impact.
Primary rating from Vendor (drupal).
CVSS VectorVendor: drupal
Lifecycle Timeline
6DescriptionCVE.org
Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenAI Provider allows Server Side Request Forgery. This issue affects OpenAI Provider versions: from 0.0.0 to 1.1.1, from 1.2.0 to 1.2.2.
AnalysisAI
Server-Side Request Forgery in the Drupal OpenAI Provider module enables authenticated administrators to force the server to issue HTTP requests to attacker-controlled destinations, potentially reaching internal network resources beyond the intended API boundary. Affected versions span 0.0.0 through 1.1.1 and 1.2.0 through 1.2.2; a vendor patch is available via Drupal security advisory SA-CONTRIB-2026-053. No public exploit code exists, EPSS sits at 0.14% (4th percentile), and SSVC confirms exploitation status as none - all signals converge on a low operational priority despite the network-accessible attack vector.
Technical ContextAI
The Drupal OpenAI Provider is a contributed Drupal module (CPE: cpe:2.3:a:drupal:openai_provider) that integrates Drupal-based sites with OpenAI APIs, enabling content generation and AI-assisted features within the CMS. The root cause, CWE-918 (Server-Side Request Forgery), arises when the module passes insufficiently validated, attacker-influenced input - such as an API endpoint URL or related configuration value - directly into a server-side HTTP client, allowing the server to be coerced into fetching internal network addresses, cloud metadata endpoints, or other resources the attacker would not otherwise reach. Because the module is contributed (not Drupal core), its attack surface is limited to sites that have explicitly installed and configured it.
RemediationAI
Update the Drupal OpenAI Provider module to version 1.1.1 or 1.2.2, whichever corresponds to the installed branch, per vendor advisory SA-CONTRIB-2026-053 at https://www.drupal.org/sa-contrib-2026-053. Note a minor version discrepancy between the CVE description (which lists 1.1.1 as within the affected range) and EUVD data (which treats 1.1.1 as the fix boundary) - confirm the exact patched release against the advisory before deploying. If patching is temporarily delayed, restrict access to the Drupal administration UI to trusted IP ranges using web server ACLs or Drupal's own IP-based access controls; this prevents external actors from reaching the configuration surfaces that expose the SSRF. Disabling the OpenAI Provider module entirely is an effective but disruptive workaround that removes all AI-assisted functionality.
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today