{"id":"CVE-2026-35102","kind":"vulnerability","aliases":["CVE-2026-35102"],"related":[],"title":"HCL AION: open redirect in GenAI web interface navigation bar","description":"HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface (Navbar component). The switch-version action redirected the browser to a dynamically constructed URL (window origin + '/workspace') without validating the redirect destination. This may be used in phishing attacks, potentially resulting in unintended behavior or security impact under certain conditions.","summary":"HCL AION's GenAI web interface sends the browser to a constructed URL in its navigation bar without checking the destination. An attacker can use this to send users from a trusted page to a phishing site.","severity":"medium","cvss":4.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["genai-web-interface","hcl-aion","other"],"not_affected_if":["not-running-hcl-aion"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-06T14:17:11+00:00","first_seen_at":"2026-11-06T14:42:11+00:00","triaged_at":"2026-11-06T14:43:45+00:00","updated_at":"2026-11-06T14:43:45+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-06T14:43:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"HCL AION: open redirect in GenAI web interface navigation bar","impact":"low","summary":"HCL AION's GenAI web interface sends the browser to a constructed URL in its navigation bar without checking the destination. An attacker can use this to send users from a trusted page to a phishing site.","audience":"businesses","category":"other","nicknames":[],"who_cares":["hcl-aion","genai-web-interface"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"users are redirected to phishing pages hosted by an attacker","analyst_note":"Check the HCL advisory for affected and fixed AION versions and the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-35102.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["not-running-hcl-aion"],"who_is_affected":"Teams running HCL AION with the GenAI web interface exposed to users. The sources do not name affected versions or the exact configuration that enables the navigation bar. Teams not running HCL AION can skip it.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000647,"input_tokens":4251,"output_tokens":444,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-35102':13A,16A '/workspace':96C 'action':85C 'affect':64C 'aion':2A,23B,25B,62C 'attack':46B,108C 'bar':10A,40B,73C 'behavior':113C 'browser':32B,88C 'certain':118C 'check':42B 'compon':80C 'condit':119C 'construct':35B,92C 'cve':11A,14A 'destin':44B,101C 'dynam':91C 'genai':6A,18B,27B,76C 'genai-web-interfac':17B 'hcl':1A,22B,24B,61C 'hcl-aion':21B 'impact':116C 'interfac':8A,20B,29B,78C 'may':103C 'navbar':79C 'navig':9A,39B,72C 'open':3A,67C 'origin':95C 'page':56B 'phish':59B,107C 'potenti':109C 'redirect':4A,68C,86C,100C 'result':110C 'secur':115C 'send':30B,51B 'site':60B 'switch':83C 'switch-vers':82C 'trust':55B 'unintend':112C 'url':36B,93C 'use':48B,105C 'user':52B 'valid':98C 'version':84C 'vulner':69C 'web':7A,19B,28B,77C 'window':94C 'without':41B,97C","nicknames":[],"mitigations":[],"who_affected":"Teams running HCL AION with the GenAI web interface exposed to users. The sources do not name affected versions or the exact configuration that enables the navigation bar. Teams not running HCL AION can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["genaiwebinterface","hclaion","medium","other"],"campaign_type":null,"search_a":"'-2026':12A,15A '-35102':13A,16A 'aion':2A 'bar':10A 'cve':11A,14A 'genai':6A 'hcl':1A 'interfac':8A 'navig':9A 'open':3A 'redirect':4A 'web':7A","search_b":"'aion':23B,25B 'attack':46B 'bar':40B 'browser':32B 'check':42B 'construct':35B 'destin':44B 'genai':18B,27B 'genai-web-interfac':17B 'hcl':22B,24B 'hcl-aion':21B 'interfac':20B,29B 'navig':39B 'page':56B 'phish':59B 'send':30B,51B 'site':60B 'trust':55B 'url':36B 'use':48B 'user':52B 'web':19B,28B 'without':41B","search_c":"'/workspace':96C 'action':85C 'affect':64C 'aion':62C 'attack':108C 'bar':73C 'behavior':113C 'browser':88C 'certain':118C 'compon':80C 'condit':119C 'construct':92C 'destin':101C 'dynam':91C 'genai':76C 'hcl':61C 'impact':116C 'interfac':78C 'may':103C 'navbar':79C 'navig':72C 'open':67C 'origin':95C 'phish':107C 'potenti':109C 'redirect':68C,86C,100C 'result':110C 'secur':115C 'switch':83C 'switch-vers':82C 'unintend':112C 'url':93C 'use':105C 'valid':98C 'version':84C 'vulner':69C 'web':77C 'window':94C 'without':97C","first_public_at":"2026-11-06T14:17:11+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss_by":"psirt@hcl.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-35102","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35102","severity":null,"published_at":"2026-11-06T14:17:11+00:00","modified_at":"2026-11-06T14:17:11+00:00","first_seen_at":"2026-11-06T14:42:11+00:00","fetched_at":"2026-11-06T14:42:11+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}