---
id: "CVE-2026-66984"
page: "https://infrastack.ai/live/CVE-2026-66984"
kind: "vulnerability"
aliases: ["CVE-2026-66984"]
title: "HCL AION: some application responses reveal internal server file paths"
severity: "low"
cvss: 3.1
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["hcl-aion", "other", "self-hosted"]
not_affected_if: []
published_at: "2026-11-06T16:18:57+00:00"
first_seen_at: "2026-11-06T16:42:42+00:00"
updated_at: "2026-11-06T16:44:52+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66984", "first_seen_at": "2026-11-06T16:42:42+00:00"}]
exploit_sources: []
---

# HCL AION: some application responses reveal internal server file paths

Link for people: https://infrastack.ai/live/CVE-2026-66984 (this .md is for agents)

Certain HCL AION application responses disclose internal server file system paths. An attacker can use that layout information to plan further attacks.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-06T16:42:42+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-66984

## From the sources

HCL AION is affected by a vulnerability where certain application responses revealed internal server file system paths. This information could help an attacker understand the application structure and plan further attacks, potentially resulting in unintended behavior or security impact under certain conditions.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_