CVE-2026-118551
Received Received - Intake

Insecure Storage of Sensitive Data in Drupal AI

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: Drupal.org

Description
Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded Sensitive Data. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-118551
EUVD
EUVD-2026-113501

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Drupal AI (Artificial Intelligence) 0.0.0
Drupal AI (Artificial Intelligence) 1.5.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-922 The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves Drupal AI storing sensitive information insecurely. Attackers could retrieve embedded sensitive data from affected versions (0.0.0 to 1.4.11 and 1.5.0 to 1.5.2).

Impact Analysis

Unauthorized access to sensitive data could lead to data breaches, privacy violations, or misuse of confidential information. Systems using vulnerable versions are at risk.

Compliance Impact

This vulnerability may violate GDPR (data protection) and HIPAA (health data) by exposing sensitive information improperly. Compliance requires secure storage and access controls.

Mitigation Strategies

Update Drupal AI to a version beyond 1.5.2 or apply patches if available. Remove any stored sensitive data that may have been embedded due to this issue. Review access logs for unauthorized data retrieval attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-118551. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart