CVE-2025-52637

The CVE-2025-52637 family concerns HCL AION, an AI lifecycle management platform, where certain offering configurations may allow execution of potentially harmful SQL queries. The root cause described across connected sources is insufficient validation or restrictions on query execution, which co...

CVE-2025-52648

HCL AION is affected by CVE-2025-52648: offering images are not digitally signed, allowing unverified or tampered images which may cause integrity issues or unintended system behavior. Root cause: lack of image signing. No remediation details provided in the connected documents.

CVE-2025-52638

CVE-2025-52638 affects HCL AION. The documented issue is that generated containers may execute binaries with root-level privileges, increasing risk when containers run with root privileges inside the container environment. Connected sources reiterate the same vulnerability description across mult...