CVE-2026-35107

HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface UserMenu component. The redirect to the login page on logout used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing...

EUVD-2026-118260

HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface UserMenu component. The redirect to the login page on logout used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing...

CVE-2026-35107 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface UserMenu component. The redirect to the login page on logout used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing...

CVE-2026-35107

The HCL AION platform is impacted by an open redirect vulnerability within the UserMenu component of the GenAI web interface. The root cause is that the application performs a redirect to a login page upon logout using a URL from the build configuration (NEXT_PUBLIC_LOGIN_URL ) without validating...

CVE-2026-35107: HCL Software HCL AION: HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface (UserMenu component)

HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface UserMenu component. The redirect to the login page on logout used a URL taken from build configuration NEXTPUBLICLOGINURL without validating the redirect destination. This may be used in phishing...