HIGH
Missing authentication in Aix-DB
Published Jun 10, 2026
7.1
HIGHCVSS 4.0
EPSS 0.31%
Description
A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all other application endpoints. All releases up to 1.2.4 are considered vulnerable. Status of next releases is unknown as the vulnerability has not been addressed by any patch.
Affected products
-
- Version 0StatusaffectedConstraints<=1.2.4
- Version
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
- https://cert.pl/posts/2026/06/CVE-2026-8335 third-party-advisory
- https://github.com/apconw/Aix-DB product
| Link | Providers | Tags |
|---|---|---|
| https://cert.pl/posts/2026/06/CVE-2026-8335 | third-party-advisory | |
| https://github.com/apconw/Aix-DB | product |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner CERT-PL
Published Jun 10, 2026
Updated Jun 10, 2026
Reserved May 11, 2026
Link CVE-2026-8335
CISA Vulnrichment
Updated Jun 10, 2026