TI-2026-76778 CVE-2026-112239 · GHSA-8rpv-rcww-q7xp
Broken access control in TYPO3 AI Integration Extension
Priority LOW 32
The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page record.
Vulnerabilities
2 records
Advisory: TYPO3 Extension "TYPO3 AI Integration Extension" — typo3.org/security/advisory/typo3-ext-sa-2026-035 Clear all filters
TI-2026-76782 CVE-2026-113459 · GHSA-7546-2qgp-jfhx
Sensitive data exposure in TYPO3 AI Integration Extension (ns_t3ai)
Priority LOW 37
In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service directly from the browser.