CVE-2026-118546

Drupal AI Chatbot rendering can permit cross-site scripting

Drupal AI maintainers · Drupal AI module — AI Chatbot submodule

First documented disclosure · Review checkpoint

Summary

Certain chatbot configurations do not sufficiently filter rendered input.

Severity and exploitation evidence

Unknown · numeric CVSS score not recorded. Severity source.

Exploitation not established: Drupal labels exploitation theoretical in its risk vector; no campaign or victim is established.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Insufficient filtering enables cross-site scripting.

Conditions required

The attacker must have permission to administer blocks; only certain chatbot configurations are affected.

Potential impact

Browser script execution in the affected page context.

Affected versions and configurations

Before 1.4.11, or 1.5.0 through 1.5.1.

Fix and mitigation status

1.4.11 and 1.5.2; the unsupported 1.3.x branch must move to a supported fixed branch.

Practical next steps

Upgrade to the fixed supported branch and limit block-administration permission.

Operating lesson

Validate and escape chatbot output at the rendering boundary, including administrator-controlled settings.

Evidence and limits

Drupal’s October 28 advisory explicitly assigns CVE-2026-118546. The CNA API returned 404 on review. Drupal risk 13/25 is not CVSS and is not converted into a CVSS score. Drupal calls it Moderately critical, using its own risk system.

Sources