Skip to content
OpenAdvisories
High · 7.5 CVE-2025-31692 DRUPAL-CONTRIB-2025-021EUVD-2025-9013GHSA-pwjq-fx3v-8f9r

AI (Artificial Intelligence) - Critical - Remote Code Execution - SA-CONTRIB-2025-021

Published Mar 31, 2025 · Updated Apr 3, 2025 · Assigned by drupal

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.

Affected products

VendorProductAffectedFixed
Drupal AI (Artificial Intelligence) 0.0.0 – < 1.0.5 1.0.5

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/ai < 1.0.5 1.0.5 DRUPAL-CONTRIB-2025-021

Advisories 1

References