PT-2026-37444 · Hcl · Bigfix Runbookai

Published 2026-05-06 · Updated 2026-05-06 · CVE-2025-31951

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's input handling was identified that could permit unauthorized command execution.

Fix

Command Injection

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-77

CWE-351

CWE-451

Related Identifiers

CVE-2025-31951

Affected Products

Bigfix Runbookai

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-31951 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130444 · Note