Image Integrity Issue in HCL AION Software

CVE-2025-52648

What is CVE-2025-52648?

HCL AION is susceptible to a vulnerability due to the absence of digital signing for offering images. This lack of image verification can result in the deployment of unverified or potentially tampered images, raising significant concerns about system integrity and unintended behavioral changes. Organizations utilizing HCL AION should take immediate steps to mitigate risks associated with this vulnerability and consider implementing stringent image verification mechanisms.

References