CVE-2025-52643HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment

Description

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129410 Vendor Advisory