CVE-2025-52640CWE-276

CVE-2025-52640

Medium · published August 13, 2026

CVSS v3.1
4.7
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or security impact under certain conditions.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00110 · 1.2th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2026-08-13T17:17Z
References (1)
EPSS history
Timeline
  • 13 AUG 13:08Z
    HCL AION is affected by multiple security vulnerabilities.
    cvelistv5