Valery Lourie

This module provides a framework for integrating AI providers and features into Drupal. The issue occurs because the module does not sufficiently sanitize certain HTMX attributes, leading to Cross-Site Scripting (XSS), where malicious scripts can be injected into web pages.

Stored Cross-site Scripting (XSS) occurs because the module does not sufficiently sanitize structured results when using legacy agent setups. This issue requires an attacker to invoke a prompt injection via editorial content on sites configured using the AI 1.0.x and AI Agents 1.0.x branches with an uncommon configuration.

An authorization flaw in the AI Translate submodule allows forceful browsing. The module fails to sufficiently verify access permissions for entities, related fields, or referenced entities during the AI translation process, particularly when these components have different access levels than the parent entity. This results in a permission bypass specifically for the translation operation, although it does not grant unauthorized read or update access to the affected entities.

An authorization flaw allows forceful browsing within the module used for automatic entity translation. The system fails to sufficiently verify access permissions for the entity being translated, its related fields, or referenced entities when performing an AI translation, particularly when these components have different access levels than the parent entity. This results in a permission bypass limited strictly to the translation operation, without granting unauthorized read or update access to the affected entities.

A missing authorization issue allows forceful browsing. Certain Drupal core actions exposed as agent tools lack correct access validation, and some core actions are missing associated access-level definitions. This allows an agent to utilize Drupal core actions tools by bypassing access controls, provided the attacker can communicate with the affected agent and the site is configured to expose these tools to non-privileged users.

An incorrect authorization issue exists in Drupal AI (Artificial Intelligence) that allows for resource injection. The module and certain submodules (AI Automators, AI Translate, AI API Explorer, AI Content Suggestions) allow the use of a Large Language Model (LLM) to generate HTML or Markdown, and preview it in a browser. Under specific conditions, rendering this HTML can expose secret communications related to the LLM request.