CVE-2026-8335

UNKNOWN 0.0

Missing authentication in Aix-DB

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all other application endpoints. All releases up to 1.2.4 are considered vulnerable. Status of next releases is unknown as the vulnerability has not been addressed by any patch.

CWE	CWE-306
Vendor	aix-db
Product	aix-db
Published	Jun 10, 2026

Stay Ahead of the Next One

Get instant alerts for aix-db aix-db

Be the first to know when new unknown vulnerabilities affecting aix-db aix-db are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Aix-DB / Aix-DB

0 ≤ 1.2.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/apconw/Aix-DB cert.pl: https://cert.pl/posts/2026/06/CVE-2026-8335

Credits

Eryk Winiarz