What is CVE-2025-52640?

CVE-2025-52640 is a medium-severity vulnerability in Hcl Software Aion, classified under Incorrect Default Permissions. CVSS score: 4.7/10. Published 2026-08-13.

How severe is CVE-2025-52640?

Medium severity. CVSS v3 base score is 4.7 out of 10.

Vulnerability in Hcl Software Aion

CVE-2025-52640

HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scop…

CVSS v3 metric

CVSS v3 base score 4.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L.

Affected products

Hcl Software Aion — versions v2.0

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

psirt@hcl.com

Frequently asked questions

What is CVE-2025-52640?: CVE-2025-52640 is a medium-severity vulnerability in Hcl Software Aion, classified under Incorrect Default Permissions. CVSS score: 4.7/10. Published 2026-08-13.
How severe is CVE-2025-52640?: Medium severity. CVSS v3 base score is 4.7 out of 10.