CVE-2025-52661 LOW

CVE-2025-52661

Vendor Hcl Software

Product AION

Weakness CWE-613 · Insufficient session expiration

Published January 19, 2026

Last update January 20, 2026

View on NVD All CVEs

CVSS base score

2.4/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction Required

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse, potentially resulting in unauthorized access if the token is compromised.

Key dates

02Disclosure timeline

January 19, 2026 CVE published

January 20, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-52661 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/613.html