CVE-2026-13233: SSRF Vulnerability in drupal/ai_provider_openai Package
Summary
CVE-2026-13233: This module enables you to use OpenAI as a provider for the AI module. Affects drupal/ai_provider_openai across 2 version ranges.
< 1.1.1
>= 1.2.0, < 1.2.2
Fixed in 1.1.1 or 1.2.2, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drupal/ai_provider_openai package allows users to integrate OpenAI as a provider for the AI module in Drupal. This module is designed to enhance the capabilities of AI-generated content within Drupal applications. However, it has been found to have a significant security flaw that can be exploited if not addressed promptly.
Vulnerability Detail
The vulnerability arises from insufficient sanitization of user-supplied URLs within the drupal/ai_provider_openai module. This oversight can lead to a Server-side Request Forgery (SSRF) attack, where an attacker could manipulate the host URL to access internal resources or services that should be protected. To exploit this vulnerability, an attacker must have the ability to change the host URL and a method to generate AI-generated images, making it a serious concern for affected systems.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.1.11.1.1 -
>= 1.2.0, < 1.2.21.2.2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, restrict user access to modify the host URL or implement additional validation on user inputs to mitigate the risk of SSRF attacks until the package can be updated.
Conclusion
The drupal/ai_provider_openai package has a critical SSRF vulnerability that needs immediate attention. Users are advised to update to the latest patched versions to protect their applications from potential exploitation. Implementing temporary workarounds can help mitigate risks until the update is applied.
See every vulnerability recorded for drupal/ai_provider_openai →
FAQ
Server-side Request Forgery (SSRF) is a security vulnerability that allows an attacker to send crafted requests from the server to internal or external resources, potentially exposing sensitive data.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities without requiring access to the code.
If exploited, this vulnerability could allow attackers to access internal services, leading to data breaches or further exploitation of the system.
Yes, you can restrict user permissions to change the host URL and implement input validation as a temporary measure until the package is updated.
For more information, you can reach out to Kuniyoshi Noguchi (kuninogu) via their Drupal profile at https://www.drupal.org/u/kuninogu.
