CVE-2026-118548

Drupal AI rendered links can leak sensitive information

Drupal maintainers · AI module link validation

First documented disclosure · Review checkpoint

Summary

Untrusted sources rendered as HTML can produce links that expose information to external sites.

Severity and exploitation evidence

Unknown · numeric CVSS score not recorded. Severity source.

Exploitation not established: Drupal labels exploitation theoretical; reviewed sources establish neither malicious exploitation nor a confirmed victim.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Conditional link-validation gaps allow sensitive data to be directed outside the site.

Conditions required

The AI module must process untrusted sources in an interaction that produces rendered HTML.

Potential impact

Potential disclosure to external sites; confirmed malicious exfiltration is not established.

Affected versions and configurations

AI module before 1.4.11, or 1.5.0 through 1.5.1.

Fix and mitigation status

AI 1.4.11 and 1.5.2; unsupported 1.3.x must move to a supported fixed branch.

Practical next steps

Upgrade to the fixed supported branch. Restrict untrusted rendered sources and review permitted link destinations.

Operating lesson

Treat links generated from untrusted AI context as an outbound data boundary.

Evidence and limits

The vendor advisory was public 2026-10-28; October 30 is later CNA publication. Drupal rates this Moderately critical 11/25 under its own risk system, not CVSS; no numeric CVSS is inferred. The original advisory describes information disclosure; the CNA’s generic authorization/resource-injection classification is not evidence of a separate attack.

Sources