CVE-2025-31693
CVE-2025-31693 · AI (Artificial Intelligence) - Moderately critical - Gadget Chain - SA-CONTRIB-2025-022
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.
CVSS 6.6 · Medium · EPSS 0.8% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
ai (artificial intelligence)
- Versions
- ≥ 0.0.0, < 1.0.5: Affected (semver)
Update to 1.0.5
drupal/ai Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 1.0.5
Update to 1.0.5
drupal/ai Packagist
- Affected ranges
- ECOSYSTEM: < 1.0.5
Update to 1.0.5