A backend endpoint in the TYPO3 AI Integration Extension (ns_t3ai) writes submitted values directly into page record fields without verifying the caller’s permissions or restricting which fields can be altered. The result is that any authenticated admin, editor, or other backend user can change any property of any page, including visibility settings, configuration, and security attributes. This flaw represents a privilege escalation and data integrity violation, exposing the system to arbitrary changes that could affect site availability, content accuracy, or even enable further attacks if configuration fields are writable.

TYPO3 CMS with the TYPO3 AI Integration Extension.(ns_t3ai). No specific product versions are listed in the advisory, so all currently deployed versions that contain the vulnerable endpoint are potentially affected until a patch is released.

The CVSS v3.1 score of 7.2 indicates high impact, while the EPSS score of less than 1% shows a low probability of exploitation at this time. The vulnerability is not listed in CISA’s KEV catalog. The most likely attack vector is any authenticated backend user exploiting the exposed endpoint; no special privileges beyond normal CMS access are required. Exploitation requires only that the user be logged in and has permission to use backend tools, which is typical for administrative roles. The attack would be executed by sending a crafted request to the backend endpoint with the desired field changes.