CVE-2026-4530 | apconw Aix-DB up to 1.2.3 terminology_retriever.py Description sql injection

A vulnerability was found in apconw Aix-DB up to 1.2.3. It has been rated as critical. This impacts an unknown function of the file agent/text2sql/rag/terminology_retriever.py. Performing a manipulation of the argument Description results in sql injection.

This vulnerability is reported as CVE-2026-4530. The attack requires a local approach. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.