# CVE-2026-13234: Drupal AI module cross-site scripting and information disclosure

Source: https://junglewise.ai/threats/cve-2026-13234-drupal-ai-module-cross-site-scripting-and-information-disclosure  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-10. Updated: 2026-07-10  
License: CC BY 4.0 with a link back

CVE-2026-13234 · Severity: info · CVSS 5.4 · Published 2026-07-10

The Drupal AI module, which integrates large language models (LLMs) into websites, contains a security flaw in how it handles generated content. An attacker could potentially inject malicious text into AI prompts, causing the system to display harmful scripts or reveal sensitive communication details to other users. This could lead to unauthorized actions being performed in a user's browser or the exposure of private data.

Technologies: [Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai](https://junglewise.ai/threats/technologies/drupal-ai). Vendors: [Packagist:Https://Packages.Drupal.Org/8](https://junglewise.ai/threats/vendors/packagist-https-packages-drupal-org-8).

## Quick answers

**Is CVE-2026-13234 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-13234 being exploited in the wild.

**How severe is CVE-2026-13234?** Informational severity, with a CVSS score of 5.4, published 10 July 2026.

**Which products and versions are affected?** Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai ECOSYSTEM:introduced=0,fixed=1.2.17|ECOSYSTEM:introduced=1.3.0,fixed=1.3.8|ECOSYSTEM:introduced=1.4.0,fixed=1.4.3.

**Is there a fix for CVE-2026-13234?** Yes. Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai: upgrade to 1.2.17 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-13234 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-13234?** Check whether you run Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Packagist:Https://Packages.Drupal.Org/8 Drupal/Ai: upgrade to 1.2.17 or later

## Technical details

The Drupal AI module and several submodules (including AI Automators, AI Translate, AI API Explorer, and AI Content Suggestions) fail to properly neutralize input when rendering HTML or Markdown generated by Large Language Models (LLMs). An attacker can exploit this by injecting malicious payloads into prompts that, when processed by the LLM and previewed in a browser, result in Cross-Site Scripting (XSS) or the disclosure of secret communications within the LLM request context. The attack requires the ability to influence the text sent to the LLM. The issue is resolved in versions 1.2.17, 1.3.8, and 1.4.3.

## Affected products

- Drupal AI (Artificial Intelligence) 0.0.0 to 1.2.16, 1.3.0 to 1.3.7, 1.4.0 to 1.4.2

## Identifiers

- CVE-2026-13234
- DRUPAL-CONTRIB-2026-054

## Timeline

- 2026-06-24: advisory: Drupal security advisory SA-CONTRIB-2026-054 published
- 2026-07-10: disclosed: CVE-2026-13234 published to NVD

## References

- [https://www.drupal.org/project/ai](https://www.drupal.org/project/ai)
- [https://www.drupal.org/sa-contrib-2026-054](https://www.drupal.org/sa-contrib-2026-054)

## Related threats

- [Drupal AI Automator text format access bypass](https://junglewise.ai/threats/cve-2026-118553-drupal-contrib-2026-273-the-ai-module-includes-a-submodule-ai)
- [Drupal AI module cross-site scripting in HTMX attributes](https://junglewise.ai/threats/cve-2026-118552-drupal-contrib-2026-272-this-module-provides-a-framework-for)
- [Drupal AI module information disclosure in speech-to-text audio](https://junglewise.ai/threats/cve-2026-118551-drupal-contrib-2026-271-this-module-provides-a-framework-for)
- [Drupal AI module information disclosure in Search API caching](https://junglewise.ai/threats/cve-2026-118550-drupal-contrib-2026-270-this-module-provides-a-framework-for)
- [Drupal AI module insufficient Markdown link validation XSS](https://junglewise.ai/threats/cve-2026-118549-drupal-contrib-2026-269-this-ai-module-enables-you-to-interact)