CVE-2026-21832
HCL AION is affected by multiple security vulnerabilities.
- State
- Published
- Severity
- 4.3 Medium
- Published
- Aug 13, 2026
- Updated
- Aug 13, 2026
- Reserved
- Jan 5, 2026
Description
HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output. Injected markup may be displayed to users, potentially resulting in unintended behavior or security impact under certain conditions.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N | HCL |
Weaknesses
- CWE-1427 Improper Neutralization of Input Used for LLM Prompting
Affected Products
| Product | Versions |
|---|---|
AIONHCL Software |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.