CVE-2025-31693CWE-78

AI (Artificial Intelligence) - Moderately critical - Gadget Chain - SA-CONTRIB-2025-022

Medium · published March 31, 2025

CVSS v3.1
6.6
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00760 · 54.9th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-03-31T21:51Z
EPSS history
Timeline
  • 31 MAR 21:51Z
    AI (Artificial Intelligence) - Moderately critical - Gadget Chain - SA-CONTRIB-2025-022
    cvelistv5