CVE-2026-82881 in Aix-DB
Zusammenfassung
von MITRE • 31.08.2026
Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descriptions, or knowledge messages that execute in users' browsers when viewed.
If you want to get best quality of vulnerability data, you may have to visit VulDB.