Threats tagged 'drupal-contrib-2026-271'

The Drupal AI integration module has a vulnerability where audio files from speech-to-text requests are stored in a shared temporary directory without deletion. An attacker with read access to this directory could access audio submitted by other users. However, this requires the attacker to have read permissions on the temporary directory, which is typically restricted. The issue is fixed in versions 1.4.11 and 1.5.2.