CVE-2026-5345

HCL AION is affected by a missing encryption vulnerability in a second WebSocket connection defined in the GenAI web interface. The connection used the unencrypted WebSocket protocol ws://test instead of an encrypted wss:// channel. This may allow data exchanged over the connection to be...