5.5Medium
CVE-2025-52627HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource
Description
Root File System Not Mounted as Read-Only configuration vulnerability. This can allow unintended modifications to critical system files, potentially increasing the risk of system compromise or unauthorized changes.This issue affects AION: 2.0.
Weakness (CWE):
CWE-732
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
References and patches
CPE matches (NVD) (1)
cpe:2.3:a:hcltech:aion:2.0.0:*:*:*:*:*:*:*