Improper neutralization of special elements in the Twig template engine used by the Drupal AI CKEditor module allows a malicious user to inject arbitrary code. The flaw enables code execution when a template is parsed, potentially compromising the entire web server and all data managed by the site. This weakness is a classic code injection or remote code execution vulnerability (CWE‑1336).

The affected product is the Drupal AI CKEditor module. Any installation using version 0.0.0 up to and including 1.4.3 is vulnerable. The risk extends to all sites deploying these module revisions without applying the official fix.

The CVSS score of 3.5 indicates low severity, and the EPSS score of less than 1% suggests a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog, implying no confirmed widespread exploitation yet. Based on the description, the likely attack vector is that an attacker can send a crafted template payload through a public endpoint that processes Twig. If such an endpoint is reachable, code execution could occur immediately. Thus, while overall risk is low, sites that expose the module or handle user‑supplied content rendered by Twig should still consider patching promptly.