CVE-2025-52643
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment.
Published Mar 16, 2026 · updated Jun 17, 2026 · hcltech aion
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 16, 2026 · NIST NVD
Detected
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.
Jun 17, 2026 · NIST NVD
Updated
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.
Affected
- cpe hcltech/aionversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2025-52643
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2025-52643
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing special
nvd.nist.gov