medium4.7
CVE-2025-52643
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment.
Impact
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Aion | from 2.0.0 before 2.1.2 |