CVE-2024-24292: Aliconnect Software Development Kit

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary code via the aim function in the aim.js component.

Affected products

• Aliconnect Software Development Kit: version 0.0.6 only

Published 2025-03-28. Last modified 2026-06-17.