HCL AION is susceptible to Potential Command Injection vulnerability

HCL AION 2.0 has a flaw that allows attackers to inject and execute unauthorized commands on the system. This could let them perform harmful actions beyond what they should be allowed to do.

CWE-78 command injection vulnerability in HCL AION 2.0 permits an attacker to inject malicious commands through application input, leading to unintended command execution with the privileges of the running process. Exploitation requires application interaction but can result in unauthorized system-level actions and potential compromise of the underlying infrastructure.