{"id":"CVE-2026-118551","aliases":["DRUPAL-CONTRIB-2026-271","EUVD-2026-113501","GHSA-c2vh-345q-88w5"],"status":"published","title":"AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271","description":"Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00186,"percentile":0.08279,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-922"],"published":"2026-10-28T17:09:59Z","modified":"2026-11-06T12:52:11Z","fixes":[{"ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/ai","fixed_in":["1.4.11","1.5.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/ai","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.11"}]},{"type":"ECOSYSTEM","events":[{"introduced":"1.5.0"},{"fixed":"1.5.2"}]}]}],"products":[{"vendor":"drupal","product":"ai (artificial intelligence)"}],"references":[{"url":"https://www.drupal.org/sa-contrib-2026-271","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118551","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-c2vh-345q-88w5"},{"url":"https://git.drupalcode.org/project/ai","tags":["web"]},{"url":"https://www.drupal.org/project/ai","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/118xxx/CVE-2026-118551.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-118551","title":"AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271","description":"Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.","status":"published","published":"2026-10-30T03:08:55.104Z","modified":"2026-11-06T12:52:11.872Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-922"],"updated_at":"2026-11-06T13:28:12.24582Z"}],"euvd":[{"id":"EUVD-2026-113501","description":"Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.","status":"published","published":"2026-10-30T03:08:55Z","modified":"2026-11-06T12:52:11Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-06T14:05:02.958369Z"}],"ghsa":[{"id":"GHSA-c2vh-345q-88w5","title":"Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence)...","description":"Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.","status":"published","published":"2026-10-30T06:31:58Z","modified":"2026-11-06T15:31:19Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-922"],"updated_at":"2026-11-06T16:00:40.695019Z"}],"nvd":[{"id":"CVE-2026-118551","description":"Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.","status":"published","published":"2026-10-30T04:18:20.397Z","modified":"2026-11-06T13:17:27.2Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-922"],"updated_at":"2026-11-06T16:00:35.469074Z"}],"osv":[{"id":"CVE-2026-118551","title":"AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271","description":"Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.","status":"published","published":"2026-10-30T03:08:55.104Z","modified":"2026-11-08T02:30:42.146196195Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-922"],"updated_at":"2026-11-07T03:08:01.41647Z"},{"id":"DRUPAL-CONTRIB-2026-271","description":"This module provides a framework for integrating AI providers and features into Drupal.\n\nAudio for every speech-to-text request is written to the same file in the temporary directory and does not delete it afterwards. As a result, an attacker who can read the site's temporary directory could get the audio that another user sent for transcription.\n\nThis vulnerability is mitigated by the fact that the attacker needs read access to the temporary directory, either through the server (for example a shared hosting account) or through a module or custom code that exposes temporary files to other users. Drupal core's `system.temporary` route only serves temporary files to the user who owns them.","status":"published","published":"2026-10-28T17:09:59Z","modified":"2026-10-28T18:15:04.634837228Z","updated_at":"2026-11-02T15:46:13.900249Z"}]}}