PT-2026-25748 · Hcl+1 · Aion

Published 2026-03-16 · Updated 2026-03-16 · CVE-2025-52643

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HCL AION (affected versions not specified)

Description The software is susceptible to a security issue where file parsing of untrusted files does not occur within a properly isolated sandbox environment. This could lead to potential security risks, including unintended behavior or compromise of data integrity when processing specifically crafted files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2025-52643

Affected Products

Aion

References · 3

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129410 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52643 · Security Note
• https://twitter.com/CVEnew/status/2033583633039249473 · Twitter Post