{"id":"CVE-2026-96392","aliases":["DRUPAL-CONTRIB-2026-187","EUVD-2026-107814","GHSA-xxh3-46q2-4vrc"],"status":"published","title":"AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187","description":"Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00213,"percentile":0.11714,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1336"],"published":"2026-09-23T17:20:32Z","modified":"2026-10-28T02:31:12Z","fixes":[{"ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/ai_ckeditor","fixed_in":["1.4.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Packagist:https://packages.drupal.org/8","package":"drupal/ai_ckeditor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3"}]}]}],"products":[{"vendor":"drupal","product":"ai ckeditor"}],"references":[{"url":"https://www.drupal.org/sa-contrib-2026-187","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96392","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xxh3-46q2-4vrc"},{"url":"https://git.drupalcode.org/project/ai_ckeditor","tags":["web"]},{"url":"https://www.drupal.org/project/ai_ckeditor","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/96xxx/CVE-2026-96392.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-96392","title":"AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187","description":"Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3.","status":"published","published":"2026-10-22T01:21:20.959Z","modified":"2026-10-22T14:00:50.25Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-1336"],"updated_at":"2026-11-02T14:20:00.511569Z"}],"euvd":[{"id":"EUVD-2026-107814","description":"Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3.","status":"published","published":"2026-10-22T01:21:20Z","modified":"2026-10-22T14:00:50Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T16:59:35.198677Z"}],"ghsa":[{"id":"GHSA-xxh3-46q2-4vrc","title":"Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI...","description":"Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3.","status":"published","published":"2026-10-22T03:33:49Z","modified":"2026-10-22T15:33:48Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-1336"],"updated_at":"2026-11-02T15:14:16.352322Z"}],"nvd":[{"id":"CVE-2026-96392","description":"Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3.","status":"published","published":"2026-10-22T02:17:09.473Z","modified":"2026-10-22T16:54:17.39Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-1336"],"updated_at":"2026-11-02T14:13:02.371082Z"}],"osv":[{"id":"CVE-2026-96392","title":"AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187","description":"Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 to 1.4.3.","status":"published","published":"2026-10-22T01:21:20.959Z","modified":"2026-10-28T02:31:12.137518957Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-1336"],"updated_at":"2026-11-02T15:45:21.262447Z"},{"id":"DRUPAL-CONTRIB-2026-187","description":"This module enables you to use AI to fill in or replace text in CKEditor.\n\nThe module doesn't sufficiently mitigate Twig template injections in certain AI CKEditor rules, making it possible to use Twig functions to extract certain confidential system data.","status":"published","published":"2026-09-23T17:20:32Z","modified":"2026-09-23T19:15:05.683282839Z","updated_at":"2026-11-02T15:46:13.900249Z"}]}}