CVE-2025-68825CWE-276

CVE-2025-68825

High · published August 24, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
13.3
In the wild
Unconfirmed
What it is

HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00232 · 13.3th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2026-08-24T20:16Z
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731 · [email protected]
EPSS history
Timeline
  • 26 AUG 07:20Z
    EPSS moved — → 0%
    epss
  • 24 AUG 15:37Z
    HCL Hive is affected by incorrect default permissions
    cvelistv5