CVE-2025-52641
Low · 2.9CVSS
2.9
EPSS
0.1%
Published
Apr 15, 2026
CISA due date
—
The record
HCL AION is affected by a vulnerability where certain system behaviours may allow exploration of internal filesystem structures. Exposure of such information may provide insights into the underlying environment, which could potentially aid in further targeted actions or limited information disclosure.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-92936 vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code… CWE-209
- CVE-2026-11873 An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests)… CWE-209
- CVE-2026-82739 Generation of Error Message Containing Sensitive Information vulnerability in ash-project… CWE-209
- CVE-2026-82733 Generation of Error Message Containing Sensitive Information vulnerability in ash-project… CWE-209
- CVE-2026-77950 Generation of Error Message Containing Sensitive Information vulnerability in ash-project… CWE-209
- CVE-2026-82727 Generation of Error Message Containing Sensitive Information vulnerability in ash-project… CWE-209
- CVE-2026-82580 Generation of Error Message Containing Sensitive Information vulnerability in ash-project… CWE-209
- CVE-2026-75760 Generation of Error Message Containing Sensitive Information vulnerability in ash-project… CWE-209