PT-2026-42166 · Hcl · Dominoiq

CVE-2026-21836 · Published 2026-05-20 · Updated 2026-05-20

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL DominoIQ (affected versions not specified)

Description The RAG feature is affected by broken access control. Under certain circumstances, document level access restrictions are ignored when determining the data returned from an AI query, which could allow an authenticated attacker to view sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-21836

Affected Products

Dominoiq

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-21836 · Security Note
• https://t.me/CVEtracker/54397 · Telegram Post
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130932 · Note