CVE-2025-52661CWE-613

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability

Low · published January 19, 2026

CVSS v3.1
2.4
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse, potentially resulting in unauthorized access if the token is compromised.

The record
Technical detail
CVSS v3.1
2.4 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00183 · 7.5th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2026-01-19T18:04Z
EPSS history
Timeline
  • 19 JAN 18:04Z
    HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability
    cvelistv5