CVE-2025-52638

Multiple security vulnerabilities affect HCL AION

Medium · published March 16, 2026

CVSS v3.1
5.6
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potential security risk, as it grants elevated permissions within the container environment. Aligning container configurations with security best practices requires minimizing privileges and avoiding root-level execution wherever possible.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00132 · 2.5th percentile
Published
2026-03-16T12:35Z
EPSS history
Timeline
  • 16 MAR 12:35Z
    Multiple security vulnerabilities affect HCL AION
    cvelistv5