CVE-2025-52626: medium-severity vulnerability in HCL AION
HCL AION is susceptible to Potential Command Injection vulnerability
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
HCL AION 2.0 has a flaw that allows attackers to inject and execute unauthorized commands on the system. This could let them perform harmful actions beyond what they should be allowed to do.
CWE-78 command injection vulnerability in HCL AION 2.0 permits an attacker to inject malicious commands through application input, leading to unintended command execution with the privileges of the running process. Exploitation requires application interaction but can result in unauthorized system-level actions and potential compromise of the underlying infrastructure.
In the same product, most dangerous first.