Skip to content
OpenAdvisories
Medium · 4.7 CVE-2025-52643 EUVD-2025-208735GHSA-5vm9-9xjm-4755

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment

Published Mar 16, 2026 · Updated Mar 16, 2026 · Assigned by HCL

Description

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.

Affected products

VendorProductAffectedFixed
HCL AION 2.0 —

References