CVE-2025-52661: Hcltech Aion

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse, potentially resulting in unauthorized access if the token is compromised.

Affected products

Published 2026-01-19. Last modified 2026-06-17.