CVE-2025-52626: HCL AION Command Injection (CWE-78)
CVE-2025-52626 is a potential OS command injection weakness (CWE-78) in HCL AION version 2.0. The record states it can allow unintended command execution and unauthorized actions on the underlying system. NVD scores it 9.8 (Critical) under CVSS 3.1, while the CNA lists 4.5.
Overview
The record describes a potential OS command injection weakness (CWE-78) in HCL AION. Command injection occurs when untrusted input reaches a system command without adequate neutralization. The vendor advisory is HCL KB0127972.
Impact
According to the record, successful exploitation may allow unintended command execution and unauthorized actions on the underlying system. NVD assigns a CVSS 3.1 base score of 9.8 (Critical), while the CNA lists 4.5 under CVSS 3.1. The difference between these scores is not explained in the record.
Affected products and versions
- HCL AION version 2.0 (listed in the affected data as version 2.0.0)
No fixed version is listed in the record. This does not mean a fix is unavailable; the vendor advisory should be consulted.
Exploitation status
The CVE is not listed in the CISA KEV catalog in the data consulted. No confirmed exploitation appears in the sources consulted.
Remediation and mitigation
- Review vendor advisory KB0127972 and apply any update or guidance HCL provides for AION.
- Until the environment is verified as updated, limit access to AION interfaces to trusted networks and users.
- Run AION components with least privilege so that any unintended command execution has a smaller reach.
- Confirm that inputs from untrusted sources are validated and that administrative functions are restricted.
Detection guidance
- Monitor for unexpected child processes or shell activity started by AION processes.
- Review application and system logs for unusual requests or administrative actions that do not match expected operations.
Limitations of the available information
The record does not provide a fixed version, the exact vulnerable component, preconditions for exploitation, or a complete list of affected builds. No EPSS or SSVC data is available. The CNA score of 4.5 is recorded without accompanying vector details.
Frequently asked questions
What is CVE-2025-52626?
It is a potential OS command injection weakness (CWE-78) in HCL AION version 2.0, which the record says may allow unintended command execution.
Is this vulnerability actively exploited?
It is not listed in CISA KEV in the data consulted, and no confirmed exploitation appears in the sources consulted.
What should administrators do now?
Review HCL advisory KB0127972, apply any vendor guidance or update, restrict access to AION interfaces, and monitor for unexpected shell or child process activity.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.