CVE-2025-52635

A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - psirt@hcl.com

Published

2025-10-10

Last modified

2026-10-08

Weaknesses

CWE-1032

Affected products

• Aion (Hcl)
• Aion (Hcltech)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124444