Drupal AI Module XSS and Authorization Flaws

The Drupal AI (Artificial Intelligence) contrib module performs insufficient authorization checks on at least one of its endpoints, allowing forceful browsing - an authenticated user can reach a resource or route directly by URL that the module never gates behind an access check. Versions 0.0.0 through 1.3.13 and 1.4.0 through 1.4.8 are affected; exploitation requires a valid account with at least low privileges (PR:L) and cannot be performed anonymously, with impact limited to partial confidentiality and integrity and no availability effect (CVSS 4.6). There is no CISA KEV listing and no public exploit identified at time of analysis, and the vendor has published a security advisory with a fix.

Stored cross-site scripting in the Drupal AI (Artificial Intelligence) contrib module affects versions 0.0.0 through 1.3.13 and 1.4.0 through 1.4.8, allowing an authenticated user with a privileged Drupal account to store input that is later rendered to another user. The vendor CVSS 3.1 vector (AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N, base 3.1) requires victim interaction and a high-privilege account, keeping impact to low confidentiality and integrity effects. No public exploit was identified at time of analysis, and a vendor patch is available via Drupal SA-CONTRIB-2026-119.