Project: 
AI (Artificial Intelligence)
Date: 
2026-March-11
Security risk: 
Moderately critical 11 ∕ 25 AC:Complex/A:None/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: 
Information Disclosure
Affected versions: 
<1.1.11 || >=1.2.0 <1.2.12
CVE IDs: 
CVE-2026-3573
Description: 

The module and certain submodules (AI Automators, AI Translate, AI API Explorer, AI Content Suggestions) provide the ability to use an LLM to generate HTML or Markdown and preview it in a browser.

Under certain circumstances, rendering of this HTML can lead to exposing secret communications in the context of the LLM request.

Solution: 

Install the latest version:

  • If you use the AI module 1.1 or earlier, upgrade to AI 1.1.11.
  • If you use the AI module 1.2, upgrade to AI 1.2.12.
Reported By: 
Fixed By: 
Coordinated By: