---
id: "CVE-2026-35107"
page: "https://infrastack.ai/live/CVE-2026-35107"
kind: "vulnerability"
aliases: ["CVE-2026-35107"]
title: "HCL AION: open redirect in GenAI web interface user menu logout"
severity: "medium"
cvss: 4.7
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["genai-web-ui", "hcl-aion", "self-hosted", "vendor"]
not_affected_if: ["unknown"]
published_at: "2026-11-06T14:17:12+00:00"
first_seen_at: "2026-11-06T14:42:11+00:00"
updated_at: "2026-11-06T14:43:40+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35107", "first_seen_at": "2026-11-06T14:42:11+00:00"}]
exploit_sources: []
---

# HCL AION: open redirect in GenAI web interface user menu logout

Link for people: https://infrastack.ai/live/CVE-2026-35107 (this .md is for agents)

The logout redirect in the GenAI web interface user menu takes its login URL from build configuration without checking the destination. An attacker can use it to send users to a malicious site that looks like the real login page, enabling phishing.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the AION GenAI web interface is deployed and which build sets `NEXT_PUBLIC_LOGIN_URL`

## Timeline

- 2026-11-06T14:42:11+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-35107

## From the sources

HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface (UserMenu component). The redirect to the login page on logout used a URL taken from build configuration (NEXT_PUBLIC_LOGIN_URL) without validating the redirect destination. This may be used in phishing attacks, potentially resulting in unintended behavior or security impact under certain conditions.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_