CVE-2025-31693

MediumCVSS 6.6

Published: 31/03/2025(UTC)Updated: 16/07/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.72%

50th percentile - higher than 50% of all known CVEs

Summary

An OS command injection vulnerability was found in the AI (Artificial Intelligence) module for Drupal. The flaw affects versions before 1.0.5 and allows an attacker to execute arbitrary commands on the server.

Risk Assessment

An attacker can take over the server, steal data, or install malware, leading to full system compromise.

Recommendation

Immediately update the AI (Artificial Intelligence) module to version 1.0.5 or later. Restrict module access to trusted users only.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.