CVE-2026-87936
amazee.ai Private AI Provider - Critical - SQL injection - SA-CONTRIB-2026-134
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3.
| CWE | CWE-89 |
| Vendor | drupal |
| Product | amazee.ai private ai provider |
| Ecosystems | |
| Industries | WebMedia |
| Published | Oct 22, 2026 |
Stay Ahead of the Next One
Get instant alerts for drupal amazee.ai private ai provider
Be the first to know when new unknown vulnerabilities affecting drupal amazee.ai private ai provider are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Drupal / amazee.ai Private AI Provider
0.0.0 < 1.3.7 1.4.0 < 1.4.3
Credits
Matan Kotick (matank001) Dan Lemon (dan2k3k4) Dimitris Spachos (dspachos) Bram Driesen (bramdriesen) Juraj Nemec (poker10) Jess (xjm) Swan Kalata (akalata)