VYPR
← All advisories
Low severity1.9NVD Advisory· Published Mar 16, 2026· Updated Apr 25, 2026

CVE-2025-52645

CVE-2025-52645

Description

HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. This may allow the possibility of unverified or modified model artifacts being used, potentially leading to integrity concerns or unintended behaviour.

Affected products

2
  • HCLTech/Aion2 versions
    cpe:2.3:a:hcltech:aion:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:hcltech:aion:*:*:*:*:*:*:*:*range: >=2.0.0,<2.1.2
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.