---
id: "CVE-2026-35104"
page: "https://infrastack.ai/live/CVE-2026-35104"
kind: "vulnerability"
aliases: ["CVE-2026-35104"]
title: "HCL AION: signup page open redirect sends users to untrusted sites"
severity: "medium"
cvss: 4.7
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["hcl-aion", "other", "self-hosted"]
not_affected_if: ["signup-disabled"]
published_at: "2026-11-06T14:17:11+00:00"
first_seen_at: "2026-11-06T14:42:11+00:00"
updated_at: "2026-11-06T14:43:44+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35104", "first_seen_at": "2026-11-06T14:42:11+00:00"}]
exploit_sources: []
---

# HCL AION: signup page open redirect sends users to untrusted sites

Link for people: https://infrastack.ai/live/CVE-2026-35104 (this .md is for agents)

The AION user registration page takes a 'redirect' query parameter and sends the user there after signup without checking it. A crafted registration link can therefore send a user to an attacker-chosen external site, which is useful for phishing.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-06T14:42:11+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-35104

## From the sources

HCL AION is affected by an open redirect vulnerability on the user registration page (Signup component). The redirect performed after registration used the value of the 'redirect' query parameter without validation, so a crafted registration link could send a user to an untrusted external site. This may be used in phishing attacks, potentially resulting in unintended behavior or security impact under certain conditions.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_