CVE-2026-118545

Drupal AI HTML rendering can permit cross-site scripting

Drupal maintainers · AI module HTML rendering

First documented disclosure · Review checkpoint

Summary

Insufficient HTML restrictions can enable browser script execution.

Severity and exploitation evidence

Unknown · numeric CVSS score not recorded. Severity source.

Exploitation not established: Drupal labels exploitation theoretical; reviewed sources establish neither malicious exploitation nor a confirmed victim.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The AI module does not sufficiently restrict HTML rendering under certain conditions.

Conditions required

An attacker must have access to a text format that can render HTML.

Potential impact

Cross-site scripting in the affected rendered page.

Affected versions and configurations

AI module before 1.4.11, or 1.5.0 through 1.5.1.

Fix and mitigation status

AI 1.4.11 and 1.5.2; unsupported 1.3.x must move to a supported fixed branch.

Practical next steps

Upgrade to the fixed supported branch. Review which roles can use HTML-capable text formats.

Operating lesson

Constrain rendered AI content even when the author can use some HTML.

Evidence and limits

The vendor advisory was public 2026-10-28; October 30 is later CNA publication. Drupal rates this Moderately critical 14/25 under its own risk system, not CVSS; no numeric CVSS is inferred.

Sources