{"id":"CVE-2026-35106","kind":"vulnerability","aliases":["CVE-2026-35106"],"related":[],"title":"HCL AION: open redirect in GenAI web interface session handling","description":"HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface (UserContext component, line 89). A second redirect to the login page in this component used a URL taken from build configuration (NEXT_PUBLIC_LOGIN_URL) without validating the redirect destination. This may be used in phishing attacks, potentially resulting in unintended behavior or security impact under certain conditions.","summary":"HCL AION's GenAI web interface sends users to a login URL from build configuration without checking the destination. An attacker can use it to send people to a phishing page that looks like a trusted HCL site.","severity":"medium","cvss":4.7,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"HCL AION","fixed":["2.8.0"],"affected":"2.6.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["ai-tooling","genai-web-ui","hcl-aion","self-hosted"],"not_affected_if":["unknown"],"how_to_check":"Check your HCL AION version: the HCL bulletin lists V 2.6.0 as affected and 2.8.0 as the fix; it does not say whether versions older than 2.6.0 are affected, so treat them as unknown and ask HCL support. The redirect target is the NEXT_PUBLIC_LOGIN_URL value set when the GenAI web UI was built.","fix":"Upgrade HCL AION to v2.8.0 (HCL says the issue is remediated in 2.8.0; customers on older versions upgrade to 2.8.0, with help from the AION support team).","status":"open","published_at":"2026-11-06T14:17:12+00:00","first_seen_at":"2026-11-06T14:42:11+00:00","triaged_at":"2026-11-06T14:43:40+00:00","updated_at":"2026-11-06T14:46:26+00:00","category":"ai-tooling","confidence":0.85,"triage":{"at":"2026-11-06T14:43:40Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"HCL AION: open redirect in GenAI web interface session handling","impact":"low","summary":"HCL AION's GenAI web interface sends users to a login URL from build configuration without checking the destination. An attacker can use it to send people to a phishing page that looks like a trusted HCL site.","audience":"businesses","category":"ai-tooling","nicknames":[],"who_cares":["hcl-aion","genai-web-ui","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Users are redirected to a phishing page under attacker control","analyst_note":"Find the affected and fixed AION versions and the vendor advisory from HCL; the NVD entry alone does not give them.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Teams that run HCL AION with its GenAI web interface are exposed. The flaw is in the session-handling code of the web UI that redirects to the login page. The sources do not say which AION versions are affected or whether the default configuration is vulnerable.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000646,"input_tokens":4263,"output_tokens":440,"severity_before":"medium"},"analyst_status":"done","analyst_note":"Find the affected and fixed AION versions and the vendor advisory from HCL; the NVD entry alone does not give them.","search":"'-2026':12A,15A '-35106':13A,16A '89':93C 'affect':73C 'ai':20B 'ai-tool':19B 'aion':2A,18A,28B,33B,71C 'attack':52B,126C 'behavior':131C 'build':45B,109C 'certain':136C 'check':48B 'compon':91C,103C 'condit':137C 'configur':46B,110C 'cve':11A,14A 'destin':50B,119C 'genai':6A,23B,35B,87C 'genai-web-ui':22B 'handl':10A,83C 'hcl':1A,17A,27B,32B,68B,70C 'hcl-aion':26B 'host':31B 'impact':134C 'interfac':8A,37B,89C 'like':65B 'line':92C 'logic':84C 'login':42B,99C,113C 'look':64B 'may':121C 'next':111C 'open':3A,76C 'page':62B,100C 'peopl':58B 'phish':61B,125C 'potenti':127C 'public':112C 'redirect':4A,77C,96C,118C 'result':128C 'second':95C 'secur':133C 'self':30B 'self-host':29B 'send':38B,57B 'session':9A,82C 'session-handl':81C 'site':69B 'taken':107C 'tool':21B 'trust':67B 'ui':25B 'unintend':130C 'url':43B,106C,114C 'use':54B,104C,123C 'user':39B 'usercontext':90C 'valid':116C 'vulner':78C 'web':7A,24B,36B,88C 'without':47B,115C","nicknames":[],"mitigations":[],"who_affected":"Teams that run HCL AION 2.6.0 with its GenAI web interface are affected. The UserContext session-handling code (line 89) redirects to the login URL set in the build variable NEXT_PUBLIC_LOGIN_URL without validating the destination, so it can be abused for phishing and needs a user to click (CVSS 4.7). HCL's bulletin names V 2.6.0 as affected and 2.8.0 as fixed; it is silent on older versions. Teams not running AION can skip it. It is one of several sibling open-redirect CVEs fixed in the same bulletin (35102-35105, 35107).","tier":"B","verified":{"fix":{"at":"2026-11-06T14:46:26Z","by":"analyst","doc":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135118","run_id":1898},"products":{"at":"2026-11-06T14:46:26Z","by":"analyst","doc":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135118","run_id":1898}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["aion","hclaion"],"ptokens":["aion","hcl"],"labels":["aitooling","genaiwebui","hclaion","medium","selfhosted"],"campaign_type":null,"search_a":"'-2026':12A,15A '-35106':13A,16A 'aion':2A,18A 'cve':11A,14A 'genai':6A 'handl':10A 'hcl':1A,17A 'interfac':8A 'open':3A 'redirect':4A 'session':9A 'web':7A","search_b":"'ai':20B 'ai-tool':19B 'aion':28B,33B 'attack':52B 'build':45B 'check':48B 'configur':46B 'destin':50B 'genai':23B,35B 'genai-web-ui':22B 'hcl':27B,32B,68B 'hcl-aion':26B 'host':31B 'interfac':37B 'like':65B 'login':42B 'look':64B 'page':62B 'peopl':58B 'phish':61B 'self':30B 'self-host':29B 'send':38B,57B 'site':69B 'tool':21B 'trust':67B 'ui':25B 'url':43B 'use':54B 'user':39B 'web':24B,36B 'without':47B","search_c":"'89':93C 'affect':73C 'aion':71C 'attack':126C 'behavior':131C 'build':109C 'certain':136C 'compon':91C,103C 'condit':137C 'configur':110C 'destin':119C 'genai':87C 'handl':83C 'hcl':70C 'impact':134C 'interfac':89C 'line':92C 'logic':84C 'login':99C,113C 'may':121C 'next':111C 'open':76C 'page':100C 'phish':125C 'potenti':127C 'public':112C 'redirect':77C,96C,118C 'result':128C 'second':95C 'secur':133C 'session':82C 'session-handl':81C 'taken':107C 'unintend':130C 'url':106C,114C 'use':104C,123C 'usercontext':90C 'valid':116C 'vulner':78C 'web':88C 'without':115C","first_public_at":"2026-11-06T14:17:12+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvss_by":"psirt@hcl.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-35106","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35106","severity":null,"published_at":"2026-11-06T14:17:12+00:00","modified_at":"2026-11-06T14:17:12+00:00","first_seen_at":"2026-11-06T14:42:11+00:00","fetched_at":"2026-11-06T14:42:11+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-35106:1898","url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135118","severity":null,"published_at":"2026-11-06T14:46:26+00:00","modified_at":"2026-11-06T14:46:26+00:00","first_seen_at":"2026-11-06T14:46:26+00:00","fetched_at":"2026-11-06T14:46:26+00:00","note":"HCL bulletin KB0135118 (4 Nov 2026) lists CVE-2026-35106 under AION V 2.6.0, fixed in 2.8.0. Browser was needed (JS-only page). Sibling CVEs share the bulletin. No PoC or exploitation reported; no posts searched (low-profile vendor issue).","cites":["https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135118"]}],"documents":[{"id":87158,"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0135118","title":"HCL Security Bulletin KB0135118: Multiple security vulnerabilities affect HCL AION","kind":"advisory","source":"analyst","publisher":null,"text":"HCL Security Bulletin KB0135118 (published 4 Nov 2026): Multiple security vulnerabilities affect HCL AION.\nCVE-2026-21849: missing encryption in the WebSocket connection set up by the GenAI web interface; used ws://localhost:8000 instead of wss://. CVSS 3.7.\nAffected: HCL AION V 2.6.0 (lists CVE-2026-21849). V 2.7.0 is listed only for four other CVEs.\nRemediation: \"As a part of HCL AION v2.8.0, this issue has been remediated. For customers using older version, mitigation path will include upgrade to version 2.8.0 ... HCL AION support team will provide required assistance.\"\n","published_at":null,"relation":"advisory","confidence":null,"note":null}],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}