← Database

CVE-2026-82881

MEDIUM CVSS: 5.4 Published: 2026-08-31 Modified: 2026-08-31

Description

Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descriptions, or knowledge messages that execute in users' browsers when viewed.

Affected Platforms

Unknown

Weakness Type

CWE-79

References