Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. This may allow the possibility of unverified or modified model artifacts being used, potentially leading to integrity concerns or unintended behaviour.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-52645 HCL AION Model Packaging Vulnerability Enables Unverified Artifact Distribution https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-52645
Post summary
The text references CVE-2025-52645, noting a vulnerability in HCL AION Model Packaging that permits unverified artifact distribution, but offers no PoC, exploitation details, patch information, or evidence of active attacks.
CVE-2025-52645 HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. This may allow the pos… https://www.cve.org/CVERecord?id=CVE-2025-52645
Post summary
CVE-2025-52645 exposes HCL AION to potential exploitation due to insufficient authenticity checks in model packaging, with no PoC, exploit code, patch, or active exploitation reported.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hcltech | aion | - | - | - |