Skip to content
OpenAdvisories
Medium · 5.6 CVE-2025-52638 EUVD-2025-208721GHSA-3m9h-mw45-63hc

Multiple security vulnerabilities affect HCL AION

Published Mar 16, 2026 · Updated Mar 17, 2026 · Assigned by HCL

Description

HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potential security risk, as it grants elevated permissions within the container environment. Aligning container configurations with security best practices requires minimizing privileges and avoiding root-level execution wherever possible.

Affected products

VendorProductAffectedFixed
HCL AION 2.0 —

References