CVE-2026-118553

Drupal AI Automator bypasses text-format access checks

Drupal maintainers · AI module / AI Automator

First documented disclosure · Review checkpoint

Summary

Users can author generated field data in text formats they are not allowed to use.

Severity and exploitation evidence

Unknown · numeric CVSS score not recorded. Severity source.

Exploitation not established: Drupal labels exploitation theoretical; reviewed sources establish neither malicious exploitation nor a confirmed victim.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

AI Automator insufficiently checks access to the text format selected for auto-filled fields.

Conditions required

An authenticated user can use an affected AI Automator field configuration; Drupal classifies the conditions as complex and uncommon.

Potential impact

Potential stored cross-site scripting through unauthorized text formats.

Affected versions and configurations

AI module before 1.4.11, or 1.5.0 through 1.5.1.

Fix and mitigation status

AI 1.4.11 and 1.5.2; unsupported 1.3.x must move to a supported fixed branch.

Practical next steps

Upgrade to the fixed supported branch. Review AI Automator field and text-format permissions.

Operating lesson

Generated field content must retain the author’s text-format restrictions.

Evidence and limits

The vendor advisory was public 2026-10-28; October 30 is later CNA publication. Drupal rates this Moderately critical 11/25 under its own risk system, not CVSS; no numeric CVSS is inferred.

Sources