| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/ai_agents | ≥ 1.2.0, < 1.2.5≥ 1.3.0, < 1.3.1< 1.1.4 | 1.2.51.3.11.1.4 |
| artificial intelligence | ≥ 1.2.0, < 1.2.5≥ 1.3.0, < 1.3.1< 1.1.4 | 1.2.51.3.11.1.4 |
This module provides the entity type and runtime for Drupal AI Agents, enabling agents to use tools.
The module does not sufficiently check the required permissions when a tool loads content entities.
This vulnerability is mitigated by the fact that an agent must be configured to use the affected tool, and an attacker must have access to that agent.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free