{"data":{"id":"f73f17b3-a4fb-497d-9d12-47df36e0d69b","title":"CVE-2026-4530: A security flaw has been discovered in apconw Aix-DB up to 1.2.3. This impacts an unknown function of the file…","summary":"CVE-2026-4530 is a flaw in apconw Aix-DB up to 1.2.3, in an unknown function of agent/text2sql/rag/terminology_retriever.py. Manipulating the Description argument leads to SQL injection, and the attack requires local access. A public exploit has been released, and the vendor did not respond to early disclosure.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-4530","publishedAt":"2026-03-22T00:16:06.187Z","cveId":"CVE-2026-4530","cweIds":["CWE-74","CWE-89"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Aix-DB"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"apconw Aix-DB SQL injection through terminology_retriever.py","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","attackVector":"local","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00142,"epssCheckedAt":"2026-11-11T06:13:00.934Z","kevDateAdded":null,"advisoryAliases":["GHSA-3p66-hvjq-gcvr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-11T00:13:43.358Z","patchAvailable":null,"disclosureDate":"2026-03-22T00:16:06.187Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-66"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}