CVE-2026-21832: HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output. Injected markup may be displayed to users, potentially resulting in unintended behavior or security impact under certain conditions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21832?
The severity of CVE-2026-21832 is classified as medium with a base score of 4.3.
What impact does CVE-2026-21832 have on HCL AION?
CVE-2026-21832 can lead to indirect prompt injection resulting in HTML injection in rendered output which may affect user experience.
How can I mitigate the risks associated with CVE-2026-21832?
To mitigate CVE-2026-21832, apply any patches or updates provided by HCL for AION to address the vulnerabilities.
Is user interaction required for CVE-2026-21832 to be exploited?
Yes, CVE-2026-21832 requires user interaction as it involves displaying injected markup to users.
What should I do if I suspect exploitation of CVE-2026-21832?
If you suspect exploitation of CVE-2026-21832, immediately review system logs, restrict access, and contact HCL support for further guidance.