Is CVE-2026-13234 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-13234 being exploited in the wild.

How severe is CVE-2026-13234?

Informational severity, with a CVSS score of 5.4, published 10 July 2026.

Which products and versions are affected?

Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai ECOSYSTEM:introduced=0,fixed=1.2.17|ECOSYSTEM:introduced=1.3.0,fixed=1.3.8|ECOSYSTEM:introduced=1.4.0,fixed=1.4.3.

Is there a fix for CVE-2026-13234?

Yes. Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai: upgrade to 1.2.17 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-13234 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-13234?

Check whether you run Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-13234: Drupal AI module cross-site scripting and information disclosure

CVE-2026-13234 · Severity: info · CVSS 5.4 · Published 2026-07-10

The Drupal AI module, which integrates large language models (LLMs) into websites, contains a security flaw in how it handles generated content. An attacker could potentially inject malicious text into AI prompts, causing the system to display harmful scripts or reveal sensitive communication details to other users. This could lead to unauthorized actions being performed in a user's browser or the exposure of private data.

Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai. Vendors: Packagist:Https://Packages.Drupal.Org/8.

Quick answers

Is CVE-2026-13234 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-13234 being exploited in the wild.
How severe is CVE-2026-13234?: Informational severity, with a CVSS score of 5.4, published 10 July 2026.
Which products and versions are affected?: Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai ECOSYSTEM:introduced=0,fixed=1.2.17|ECOSYSTEM:introduced=1.3.0,fixed=1.3.8|ECOSYSTEM:introduced=1.4.0,fixed=1.4.3.
Is there a fix for CVE-2026-13234?: Yes. Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai: upgrade to 1.2.17 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-13234 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-13234?: Check whether you run Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai: upgrade to 1.2.17 or later

Technical details

The Drupal AI module and several submodules (including AI Automators, AI Translate, AI API Explorer, and AI Content Suggestions) fail to properly neutralize input when rendering HTML or Markdown generated by Large Language Models (LLMs). An attacker can exploit this by injecting malicious payloads into prompts that, when processed by the LLM and previewed in a browser, result in Cross-Site Scripting (XSS) or the disclosure of secret communications within the LLM request context. The attack requires the ability to influence the text sent to the LLM. The issue is resolved in versions 1.2.17, 1.3.8, and 1.4.3.

Affected products

Drupal AI (Artificial Intelligence) 0.0.0 to 1.2.16, 1.3.0 to 1.3.7, 1.4.0 to 1.4.2

Identifiers

CVE-2026-13234
DRUPAL-CONTRIB-2026-054

Timeline

2026-06-24: advisory: Drupal security advisory SA-CONTRIB-2026-054 published
2026-07-10: disclosed: CVE-2026-13234 published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.