Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.2
CVE-2025-52638: HCL AION Containers Can Run with Elevated Privileges
CVE-2025-52638 · published 7 months ago
Summary
Certain containers in HCL AION may run with excessive permissions, potentially allowing malicious code to spread within the container environment. This can be a security risk if not addressed. To mitigate this, ensure that container configurations are set to use the least privileged access necessary.
What to do
- Update hcl aion to version 2.1.2 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| hcl | aion |
>= 2.0, < 2.1.2 cpe:2.3:a:hcl:aion:*:*:*:*:*:*:*:* |
Original advisory text
HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potential security risk,...
HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potential security risk, as it grants elevated permissions within the container environment. Aligning container configurations with security best practices requires minimizing privileges and avoiding root-level execution wherever possible.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
7.2
High
Type
CWE-345Insufficient Verification of Data Authenticity
Timeline
Published16 Mar 2026
Updated2 Nov 2026
First seen17 Mar 2026
Sources
CVE-2025-52638 · NVD
Track software like this
Free during beta