Aix-DB Missing Auth Allows Unauthenticated SQL Access
An unpatched authentication bypass in Aix-DB's LLM endpoint lets unauthenticated attackers run arbitrary SELECT queries and pull database contents.
Sourcecert.pl — open the original
What to check
- Applies to
- The 1 CVE named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation
- No exploitation in the wild and no public exploit is recorded for the CVEs named.
CERT Polska coordinated disclosure of CVE-2026-8335, a vulnerability in Aix-DB software affecting the /llm/process_llm_out endpoint. Unlike other endpoints in the application, this one lacks the token validation check normally enforced, allowing unauthenticated clients to send arbitrary SELECT SQL queries and retrieve database data without any credentials.
All releases up to and including 1.2.4 are confirmed vulnerable. No patch has been issued at the time of disclosure, and the vendor's remediation status for future releases is unknown. Organizations running Aix-DB should treat this as an unresolved exposure and consider restricting network access to the affected endpoint until a fix is available. The vulnerability was reported by researcher Eryk Winiarz through CERT Polska's coordinated vulnerability disclosure process.
Mentioned in this report
Detection guidance
Unauthenticated SQL Query via Aix-DB /llm/process_llm_out Endpoint
A behavioural hunt for the technique in general, not a signature for the CVEs this report names.
Detects HTTP requests to the vulnerable Aix-DB /llm/process_llm_out endpoint carrying SQL SELECT syntax, indicating exploitation of CVE-2026-8335 missing authentication check. Auto-generated starting point — validate and tune in your environment before deploying. IOC matches can false-positive on shared infrastructure and decay as adversary infrastructure rotates.
title: Unauthenticated SQL Query via Aix-DB process_llm_out Endpoint
id: 822a2548-e2c9-59b4-9462-16eb661458d3
status: experimental
description: Detects HTTP requests to the Aix-DB /llm/process_llm_out endpoint that
embed SQL SELECT statements in the request, consistent with exploitation of CVE-2026-8335
where the endpoint lacks token validation and accepts arbitrary SELECT queries without
authentication.
references:
- CVE-2026-8335
author: Vorant
tags:
- attack.t1190
logsource:
category: webserver
detection:
selection:
cs-uri-stem|contains: /llm/process_llm_out
sql_indicators:
cs-uri-query|contains:
- 'select '
- select%20
- 'SELECT '
- union select
- UNION SELECT
condition: selection and sql_indicators
falsepositives:
- Internal reporting or BI tools that legitimately query this endpoint with SELECT-style
parameters before the vendor enforces authentication
- Automated vulnerability scanners performing authorized security assessments
level: high
Behavioural rules are generated from public reporting — validate in your environment before deploying.
Source reporting: https://cert.pl/en/posts/2026/06/CVE-2026-8335
Free public brief. The detections with Splunk SPL already written (plus Elastic and KQL where they apply) are in the app with a free account, no card. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply) and live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,436 reports from 149 sources, 661 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs