CVE-2025-31692
CVE-2025-31692 · AI (Artificial Intelligence) - Critical - Remote Code Execution - SA-CONTRIB-2025-021
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.
CVSS 7.5 · High · EPSS 0.8% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
ai (artificial intelligence)
- Versions
- ≥ 0.0.0, < 1.0.5: Affected (semver)
Update to 1.0.5
drupal/ai Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.0.5
Update to 1.0.5
drupal/ai Packagist
- Affected ranges
- ECOSYSTEM: < 1.0.5
Update to 1.0.5