SQL Injection Vulnerability in amazee.ai Private AI Provider
CVE-2026-87936

Currently unrated

Key Information:

Vendor

Drupal
Status
Amazee.ai Private Ai Provider
Vendor
CVE Published:
22 October 2026

What is CVE-2026-87936?

The amazee.ai Private AI Provider is impacted by an SQL Injection vulnerability, enabling attackers to manipulate database queries via unvalidated input. This flaw is particularly concerning as it allows for unauthorized access to sensitive data and can compromise the integrity of the application. The affected versions range from 0.0.0 to 1.3.7 and from 1.4.0 to 1.4.3. Website and application administrators should ensure they implement mitigative measures to safeguard against potential exploitation.

Affected Version(s)

amazee.ai Private AI Provider 0.0.0 < 1.3.7

amazee.ai Private AI Provider 1.4.0 < 1.4.3

References

https://www.drupal.org/sa-contrib-2026-134

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matan Kotick (matank001)
Dan Lemon (dan2k3k4)
Dimitris Spachos (dspachos)
Bram Driesen (bramdriesen)
Juraj Nemec (poker10)
Jess (xjm)
Swan Kalata (akalata)
.