CVE-2025-31693
CVSS 3.1 Score 6.6 of 10 (medium)
Details
Published Mar 31, 2025
Updated: Apr 15, 2025
CWE ID 78
Summary
CVE-2025-31693 is a serious OS Command Injection vulnerability affecting Drupal AI (Artificial Intelligence), with versions from 0.0.0 to 1.0.5 being impacted. Hackers can exploit this issue by improperly neutralizing special elements used in an OS command, gaining unauthorized access and potentially executing malicious commands on the affected system. This vulnerability poses a significant risk to the security of Drupal AI installations and requires immediate attention and patching to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Drupal Connect Inc