CVE-2025-52643

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment

Medium · published March 16, 2026

CVSS v3.1
4.7
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00096 · 0.7th percentile
Published
2026-03-16T14:26Z
EPSS history
Timeline
  • 16 MAR 14:26Z
    HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment
    cvelistv5