What’s Vulnerable › Vulnerabilities
CVE-2026-8335: Missing authentication in Aix-DB
- Severity: high (CVSS 7.1 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-10 · updated 2026-06-17
- Weakness: CWE-306
Description
A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all other application endpoints. All releases up to 1.2.4 are considered vulnerable. Status of next releases is unknown as the vulnerability has not been addressed by any patch.
Affected products
- Aix-DB: through 1.2.4
References
Get alerted when CVE-2026-8335 or the next vulnerability affects your stack