CVE Intelligence

Aix-DB vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Aix-DB products: 1 record(s), with severity, exploitation and fixes.

Aix-DB 1

Exploited only (KEV) →

CVE-2026-8335 High · 7.1 CWE-306 Jun 10, 2026
Missing authentication in Aix-DB
A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all other application endpoints. All releases up to 1.2.4 are considered vulnerable. Status of next releases is unknown as the vulnerability has not been addressed by any patch.