Auth bypass in Aix-db
CVE-2026-8335
A missing authentication check on the Aix‑DB "/llm/process_llm_out" endpoint allows unauthenticated clients to execute arbitrary "SELECT" SQL queries and retrieve database data, as the endpoint lacks the token validation enforced on all ot…
Vulnerability class: Broken Authentication
EPSS: 0.002 (9.5th percentile) — read the EPSS interpretation.
Affected products
- Aix-db — versions 0
Weakness classification (CWE)
References
- cvd@cert.pl (third-party-advisory)
- cvd@cert.pl (product)