Authentication Vulnerability in HCL DevOps Loop Middleware

CVE-2025-55278

What is CVE-2025-55278?

The authentication middleware in HCL DevOps Loop has been found to improperly handle API authentication tokens. This flaw allows the system to accept tokens that do not properly validate their expiration date or cryptographic signature. An adversary could exploit this vulnerability to utilize expired or manipulated tokens, leading to unauthorized access to sensitive resources and the ability to carry out actions with elevated privileges. Users of HCL DevOps Loop should be aware of this security risk and ensure that they follow best practices for API security and token management.

References