What’s Vulnerable › Vulnerabilities

CVE-2025-31678: AI (Artificial Intelligence) - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-004

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-31 · updated 2026-06-17
• Weakness: CWE-862

Description

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.

Affected products

• Drupal AI (Artificial Intelligence): before 1.0.3 — fixed in 1.0.3

How to fix

Upgrade to a fixed version: Drupal AI (Artificial Intelligence) 1.0.3. Check the vendor advisory for mitigations.

References

• https://www.drupal.org/sa-contrib-2025-004

Get alerted when CVE-2025-31678 or the next vulnerability affects your stack