CVE-2026-13234: Drupal AI Module Cross Site Scripting Vulnerability
Summary
CVE-2026-13234: The module and certain submodules (AI Automators, AI Translate, AI API Explorer, AI Content Suggestions) provide the ability to use an LLM to generate HTML or Markdown and preview it in a browser. Affects drupal/ai across 3 version ranges.
< 1.2.17
>= 1.3.0, < 1.3.8
>= 1.4.0, < 1.4.3
Fixed in 1.2.17, 1.3.8 or 1.4.3, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Drupal AI module and its submodules, including AI Automators, AI Translate, AI API Explorer, and AI Content Suggestions, enable users to leverage large language models (LLMs) for generating HTML or Markdown content. These tools are designed to enhance content creation and provide previews in a browser. However, due to their functionality, they are susceptible to vulnerabilities that can compromise the security of the application.
Vulnerability Detail
This vulnerability arises from the way the module renders HTML generated by LLMs. Under specific conditions, this rendering can lead to Cross Site Scripting (XSS) attacks, which may allow an attacker to inject malicious scripts into web pages viewed by other users. Additionally, there is a risk of exposing sensitive information during LLM requests. The vulnerability is particularly concerning because it requires an attacker to have the ability to inject text into prompts, making it a targeted attack vector.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.2.171.2.17 -
>= 1.3.0, < 1.3.81.3.8 -
>= 1.4.0, < 1.4.31.4.3
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, restrict user input to trusted sources and sanitize any input that may be used in prompts to prevent potential XSS attacks. This can be done by implementing input validation and escaping output where necessary.
Conclusion
The CVE-2026-13234 vulnerability in the Drupal AI module poses a significant risk due to its potential for Cross Site Scripting attacks. It is crucial for users to update to the latest patched versions to safeguard their applications. Additionally, implementing input validation and using tools like Vulert can help maintain security.
See every vulnerability recorded for drupal/ai →
FAQ
CVE-2026-13234 is a vulnerability in the Drupal AI module that can lead to Cross Site Scripting (XSS) attacks.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor for open-source vulnerabilities without needing to sign up.
If exploited, this vulnerability can allow attackers to inject malicious scripts into web pages, potentially compromising user data and application integrity.
You can update the module using Composer with the command 'composer require drupal/ai:^1.2.17', 'composer require drupal/ai:^1.3.8', or 'composer require drupal/ai:^1.4.3', depending on your current version.
Vulert is a tool that monitors and alerts for open-source vulnerabilities in software using just a manifest file like package-lock.json, providing real-time insights without requiring code access.
References
Related vulnerabilities
Recent vulnerabilities recorded for drupal/ai.
