1. Home
  2. CVE Database
  3. CVE-2025-52638
MEDIUM · 5.6

CVE-2025-52638

HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potential security risk, as...

Vulnerability Description

HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potential security risk, as it grants elevated permissions within the container environment. Aligning container configurations with security best practices requires minimizing privileges and avoiding root-level execution wherever possible.

CVSS Score

5.6

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HclAion>= 2.0, < 2.1.2

Related Weaknesses (CWE)

CWE-345

References

FAQ

What is CVE-2025-52638?

CVE-2025-52638 is a vulnerability with a CVSS score of 5.6 (MEDIUM). HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potential security risk, as...

How severe is CVE-2025-52638?

CVE-2025-52638 has been rated MEDIUM with a CVSS base score of 5.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-52638?

Check the references section above for vendor advisories and patch information. Affected products include: Hcl Aion.