CVE-2026-118552

Drupal AI HTMX attributes can permit cross-site scripting

Drupal maintainers · AI module HTMX attribute handling

First documented disclosure · Review checkpoint

Summary

Insufficient attribute sanitization can permit browser script execution.

Severity and exploitation evidence

Unknown · numeric CVSS score not recorded. Severity source.

Exploitation not established: Drupal labels exploitation theoretical; reviewed sources establish neither malicious exploitation nor a confirmed victim.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Certain HTMX attributes are not sufficiently sanitized.

Conditions required

An affected AI-rendering path accepts attacker-influenced attributes; Drupal’s risk vector requires an authenticated user.

Potential impact

Cross-site scripting in the affected page context.

Affected versions and configurations

AI module before 1.4.11, or 1.5.0 through 1.5.1.

Fix and mitigation status

AI 1.4.11 and 1.5.2; unsupported 1.3.x must move to a supported fixed branch.

Practical next steps

Upgrade to the fixed supported branch. Review rendered attributes and reduce untrusted authoring permissions.

Operating lesson

Sanitize framework-specific executable attributes as well as ordinary HTML.

Evidence and limits

The vendor advisory was public 2026-10-28; October 30 is later CNA publication. Drupal rates this Moderately critical 14/25 under its own risk system, not CVSS; no numeric CVSS is inferred. The public advisory does not name a narrower permission or provide a demonstrated victim incident.

Sources