CVE-2026-82881 — Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown
Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicio…
Published: 2026-08-31 · CVSS: 5.1 · CVSS 4.0
Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descriptions, or knowledge messages that execute in users' browsers when viewed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7