Skip to content
OpenAdvisories
High · 8.8 CVE-2025-31951 EUVD-2025-209669GHSA-w9jr-wh7w-mh6j

HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability

Published May 6, 2026 · Updated May 6, 2026 · Assigned by HCL

Description

HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's input handling was identified that could permit unauthorized command execution.

Affected products

VendorProductAffectedFixed
HCL BigFix RunBookAI 11.2 —

References