CVE-2025-52660: HCL AION is affected by an Host Header Injection vulnerability
Published Jan 19, 2026
·Updated
HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise.
Affected Software
2 affected components
HCL AION
hcltech Aion=2.0.0
Event History
Jan 19, 2026
CVE Published
via MITRE·05:49 PM
Data Sourced
via MITRE·05:49 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-52660?
CVE-2025-52660 is considered a high severity vulnerability due to its potential for unauthorized code execution.
2
How do I fix CVE-2025-52660?
To fix CVE-2025-52660, ensure you apply the latest security patches provided by HCL for AION software.
3
What types of vulnerabilities are associated with CVE-2025-52660?
CVE-2025-52660 includes a Host Header Injection vulnerability and an Unrestricted File Upload vulnerability.
4
What are the potential impacts of CVE-2025-52660?
The potential impacts of CVE-2025-52660 include unauthorized file uploads, code execution, and system compromise.
5
Which software is affected by CVE-2025-52660?
CVE-2025-52660 affects HCL AION software.