CVE-2025-31692

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.

Reserved 2025-03-31 | Published 2025-03-31 | Updated 2025-04-03 | Assigner drupal

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

Default status
unaffected

0.0.0 before 1.0.5
affected

Credits

Drew Webber (mcdruid) finder

Marcus Johansson (marcus_johansson) remediation developer

Drew Webber (mcdruid) remediation developer

Michal Gow (seogow) remediation developer

Drew Webber (mcdruid) coordinator

References

www.drupal.org/sa-contrib-2025-021

cve.org (CVE-2025-31692)

nvd.nist.gov (CVE-2025-31692)

Download JSON