{"id":"CVE-2026-35105","kind":"vulnerability","aliases":["CVE-2026-35105"],"related":[],"title":"HCL AION 2.6.0 GenAI web interface: open redirect to login URL can be used for phishing","description":"HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface (UserContext component, line 78). The redirect to the login page used a URL taken from build configuration (NEXT_PUBLIC_LOGIN_URL) without validating the redirect destination. This may be used in phishing attacks, potentially resulting in unintended behavior or security impact under certain conditions.","summary":"In HCL AION 2.6.0, the GenAI web interface's session handling (UserContext component, line 78) redirects to a login page whose URL comes from build configuration (NEXT_PUBLIC_LOGIN_URL) without validating the destination. HCL says this may be used in phishing attacks. HCL rates it CVSS 4.7 and fixes it in 2.8.0.","severity":"medium","cvss":4.7,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"HCL AION","fixed":["2.8.0"],"affected":"2.6.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["ai-tooling","genai-web-ui","hcl-aion","nextjs","open-redirect","self-hosted"],"not_affected_if":["unknown"],"how_to_check":"Check your HCL AION version; HCL lists V 2.6.0 as affected by this CVE. Also check 2.7.0 with HCL support, since the bulletin does not list it for this CVE. Also check whether NEXT_PUBLIC_LOGIN_URL is set in your GenAI web UI build configuration.","fix":"Upgrade to HCL AION v2.8.0 (HCL says the upgrade remediates this; HCL AION support assists with the upgrade).","status":"open","published_at":"2026-11-06T14:17:12+00:00","first_seen_at":"2026-11-06T14:42:11+00:00","triaged_at":"2026-11-06T14:43:41+00:00","updated_at":"2026-11-06T14:46:27+00:00","category":"ai-tooling","confidence":0.85,"triage":{"at":"2026-11-06T14:43:41Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"HCL AION GenAI web interface: open redirect enables phishing via login URL","impact":"low","summary":"HCL AION's GenAI web interface redirects users to a login page whose URL comes from build configuration without checking the destination. An attacker can use the redirect to send users to a lookalike site for phishing.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["hcl-aion","genai-web-ui","nextjs"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"users are redirected to a phishing page and may give up credentials","analyst_note":"Find the affected HCL AION versions and the vendor fix from HCL's advisory; the NVD entry gives only the description.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Teams running HCL AION's GenAI web interface, where the login redirect target is set through the NEXT_PUBLIC_LOGIN_URL build setting. The sources do not name affected versions or say how an attacker would deliver the link. unknown","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.00065,"input_tokens":4259,"output_tokens":448,"severity_before":"medium"},"analyst_status":"done","analyst_note":"Find the affected HCL AION versions and the vendor fix from HCL's advisory; the NVD entry gives only the description.","search":"'-2026':18A,21A '-35105':19A,22A '2.6.0':3A,45B '2.8.0':94B '4.7':89B '78':56B,118C 'affect':98C 'ai':26B 'ai-tool':25B 'aion':2A,24A,34B,44B,96C 'attack':84B,147C 'behavior':152C 'build':66B,130C 'certain':157C 'come':64B 'compon':54B,116C 'condit':158C 'configur':67B,131C 'cve':17A,20A 'cvss':88B 'destin':75B,140C 'fix':91B 'genai':4A,29B,47B,112C 'genai-web-ui':28B 'handl':52B,108C 'hcl':1A,23A,33B,43B,76B,85B,95C 'hcl-aion':32B 'host':41B 'impact':155C 'interfac':6A,49B,114C 'line':55B,117C 'logic':109C 'login':10A,60B,70B,123C,134C 'may':79B,142C 'next':68B,132C 'nextj':35B 'open':7A,37B,101C 'open-redirect':36B 'page':61B,124C 'phish':16A,83B,146C 'potenti':148C 'public':69B,133C 'rate':86B 'redirect':8A,38B,57B,102C,120C,139C 'result':149C 'say':77B 'secur':154C 'self':40B 'self-host':39B 'session':51B,107C 'session-handl':106C 'taken':128C 'tool':27B 'ui':31B 'unintend':151C 'url':11A,63B,71B,127C,135C 'use':14A,81B,125C,144C 'usercontext':53B,115C 'valid':73B,137C 'vulner':103C 'web':5A,30B,48B,113C 'whose':62B 'without':72B,136C","nicknames":[],"mitigations":[],"who_affected":"Teams running a self-hosted HCL AION 2.6.0 whose GenAI web interface redirects users to the login page using the NEXT_PUBLIC_LOGIN_URL build setting. A crafted flow could send users to a lookalike site for phishing, and it needs user interaction. Teams not running AION, or already on 2.8.0, can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-06T14:46:27Z","by":"analyst","doc":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135118","run_id":1899},"products":{"at":"2026-11-06T14:46:27Z","by":"analyst","doc":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135118","run_id":1899},"who_affected":{"at":"2026-11-06T14:46:27Z","by":"analyst","doc":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135118","run_id":1899}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["aion","hclaion"],"ptokens":["aion","hcl"],"labels":["aitooling","genaiwebui","hclaion","medium","nextjs","openredirect","selfhosted"],"campaign_type":null,"search_a":"'-2026':18A,21A '-35105':19A,22A '2.6.0':3A 'aion':2A,24A 'cve':17A,20A 'genai':4A 'hcl':1A,23A 'interfac':6A 'login':10A 'open':7A 'phish':16A 'redirect':8A 'url':11A 'use':14A 'web':5A","search_b":"'2.6.0':45B '2.8.0':94B '4.7':89B '78':56B 'ai':26B 'ai-tool':25B 'aion':34B,44B 'attack':84B 'build':66B 'come':64B 'compon':54B 'configur':67B 'cvss':88B 'destin':75B 'fix':91B 'genai':29B,47B 'genai-web-ui':28B 'handl':52B 'hcl':33B,43B,76B,85B 'hcl-aion':32B 'host':41B 'interfac':49B 'line':55B 'login':60B,70B 'may':79B 'next':68B 'nextj':35B 'open':37B 'open-redirect':36B 'page':61B 'phish':83B 'public':69B 'rate':86B 'redirect':38B,57B 'say':77B 'self':40B 'self-host':39B 'session':51B 'tool':27B 'ui':31B 'url':63B,71B 'use':81B 'usercontext':53B 'valid':73B 'web':30B,48B 'whose':62B 'without':72B","search_c":"'78':118C 'affect':98C 'aion':96C 'attack':147C 'behavior':152C 'build':130C 'certain':157C 'compon':116C 'condit':158C 'configur':131C 'destin':140C 'genai':112C 'handl':108C 'hcl':95C 'impact':155C 'interfac':114C 'line':117C 'logic':109C 'login':123C,134C 'may':142C 'next':132C 'open':101C 'page':124C 'phish':146C 'potenti':148C 'public':133C 'redirect':102C,120C,139C 'result':149C 'secur':154C 'session':107C 'session-handl':106C 'taken':128C 'unintend':151C 'url':127C,135C 'use':125C,144C 'usercontext':115C 'valid':137C 'vulner':103C 'web':113C 'without':136C","first_public_at":"2026-11-06T14:17:12+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss_by":"psirt@hcl.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-35105","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35105","severity":null,"published_at":"2026-11-06T14:17:12+00:00","modified_at":"2026-11-06T14:17:12+00:00","first_seen_at":"2026-11-06T14:42:11+00:00","fetched_at":"2026-11-06T14:42:11+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-35105:1899","url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135118","severity":null,"published_at":"2026-11-06T14:46:27+00:00","modified_at":"2026-11-06T14:46:27+00:00","first_seen_at":"2026-11-06T14:46:27+00:00","fetched_at":"2026-11-06T14:46:27+00:00","note":"Read HCL bulletin KB0135118 (published 4 Nov 2026): lists CVE-2026-35105 as affecting HCL AION V 2.6.0, remediated in v2.8.0 via upgrade with HCL support. No exploitation or PoC seen. Bulletin does not say whether 2.7.0 is affected by this CVE (only lists 2.6.0). Did not search X; low-conversation item.","cites":["https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135118"]}],"documents":[{"id":87158,"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135118","title":"HCL Security Bulletin KB0135118: Multiple security vulnerabilities affect HCL AION","kind":"advisory","source":"analyst","publisher":null,"text":"HCL Security Bulletin KB0135118 (published 4 Nov 2026): Multiple security vulnerabilities affect HCL AION.\nCVE-2026-21849: missing encryption in the WebSocket connection set up by the GenAI web interface; used ws://localhost:8000 instead of wss://. CVSS 3.7.\nAffected: HCL AION V 2.6.0 (lists CVE-2026-21849). V 2.7.0 is listed only for four other CVEs.\nRemediation: \"As a part of HCL AION v2.8.0, this issue has been remediated. For customers using older version, mitigation path will include upgrade to version 2.8.0 ... HCL AION support team will provide required assistance.\"\n","published_at":null,"relation":"advisory","confidence":null,"note":null}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}