CVE-2025-52627
MEDIUMHcltech Aion - Incorrect Permission Assignment
Title source: ruleDescription
Root File System Not Mounted as Read-Only configuration vulnerability. This can allow unintended modifications to critical system files, potentially increasing the risk of system compromise or unauthorized changes.This issue affects AION: 2.0.
Scores
CVSS v3
5.5
EPSS
0.0004
EPSS Percentile
10.6%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
Classification
CWE
CWE-732
Status
published
Affected Products (1)
hcltech/aion
Timeline
Published
Feb 03, 2026
Tracked Since
Feb 18, 2026