Automation Bypass Vulnerability in HCL AION Software

CVE-2025-62314

What is CVE-2025-62314?

HCL AION contains a vulnerability that permits the submission of automated or scripted requests to certain endpoints without adequate anti-automation controls. This lack of sufficient rate limiting and challenge mechanisms could lead to unintended behavior or create security risks under specific circumstances. It is crucial for users to implement appropriate safeguards to mitigate the potential impact of this vulnerability.

References