Insufficient Access Separation in HCL AION Shared Storage
CVE-2025-52640

4.7MEDIUM

Key Information:

Status
Vendor
CVE Published:
13 August 2026

What is CVE-2025-52640?

HCL AION is impacted by a vulnerability in which the shared storage architecture lacks adequate access separation. This design flaw allows processes that share the storage to potentially access or alter files outside their intended scope. As a result, this vulnerability can lead to unexpected behavior and may introduce security risks under certain circumstances.

Affected Version(s)

AION v2.0

References

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.