Executive brief
Aix-DB, a tool used to convert natural language into database insights, contains a security flaw that allows unauthorized users to access sensitive information. By bypassing authentication on a specific internal component, an attacker can run database queries to view and extract private data. This could lead to a significant data breach of any information stored in the connected database.
Technical details
Aix-DB is vulnerable to a missing authentication check (CWE-306) within its '/llm/process_llm_out' endpoint. While other application endpoints enforce token validation, this specific path lacks the necessary security checks. An unauthenticated attacker with network access to the application can exploit this to execute arbitrary 'SELECT' SQL queries against the underlying database. This allows for unauthorized data exfiltration. As of the advisory date, all versions up to 1.2.4 are vulnerable, and no official patch has been released by the vendor.
Affected products
- apconw Aix-DB up to 1.2.4
Timeline
- 2026-06-10: disclosed: Vulnerability disclosed by CERT.PL
- 2026-06-10: advisory