{"id":"CVE-2025-52645","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-52645","generatedAt":"2026-10-28T02:18:57.513Z","title":"HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.","description":"HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. This may allow the possibility of unverified or modified model artifacts being used, potentially leading to integrity concerns or unintended behaviour.","published":"2026-03-16T15:16:19.000Z","lastModified":"2026-06-17T09:36:50.000Z","status":"Analyzed","sourceIdentifier":"psirt@hcl.com","cvss":{"version":"3.1","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},"cwe":["CWE-345"],"affected":["hcltech/aion"],"epss":{"score":0.00086,"percentile":0.00303,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.09%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129410","tags":["Vendor Advisory"],"source":"psirt@hcl.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-52645","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}