"Ricochet was very impressive with their knowledge, abilities and professionalism. We never ran into a technological roadblock or problem that couldn't be solved. They were able to offer new, cutting-edge solutions around every corner, and they were fantastic about staying in communication. It seemed like we were always able to get ahold of someone, whether it was Tuesday at 1am or Saturday at 7am, someone was quick to respond and help address an emergency or even a simple inquiry. Truly professional service, and quality work.
—Jacob Sowinski, Blue Canvas

AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187

Wed, 2026-09-23 10:20 — Anonymous (not verified)

Project: AI CKEditorProject machine name: ai_ckeditorDate: 2026-September-23Security risk: Moderately critical 10 ∕ 25 AC:Basic/A:User/CI:Some/II:None/E:Theoretical/TD:DefaultVulnerability: Code execution via Twig templatesAffected versions: <1.4.3CVE IDs: CVE-2026-96392Description: This module enables you to use AI to fill in or replace text in CKEditor.
The module doesn't sufficiently mitigate Twig template injections in certain AI CKEditor rules, making it possible to use Twig functions to extract certain confidential system data.Solution: Install the latest version:

If you use the AI CKEditor module, upgrade to AI CKEditor 1.4.3.

Reported By:

Stef Rouschop (stefro)

Fixed By:

Coordinated By:

Bram Driesen (bramdriesen) of the Drupal Security Team
Greg Knaddison (greggles) of the Drupal Security Team
Dave Long (longwave) of the Drupal Security Team
Juraj Nemec (poker10) of the Drupal Security Team
Jess (xjm) of the Drupal Security Team

Path to article https://www.drupal.org/sa-contrib-2026-187

Search form

AI CKEditor - Moderately critical - Code execution via Twig templates - SA-CONTRIB-2026-187