Auth bypass in Aix-db

CVE-2026-8335

A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all ot…

Vulnerability class: Broken Authentication

EPSS: 0.002 (9.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References