Skip to content
LLMHigh

CVE-2026-21832: HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection i…

Occurred
Aug 13, 2026
Published
Aug 13, 2026
Source
NVD CVE

Summary

HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output. Injected markup may be displayed to users, potentially resulting in unintended behavior or security impact under certain conditions.

Tags

  • CVE
  • CVE-2026-21832
  • cvss:MEDIUM

Classification

Category confidence: 90%
Severity confidence: 85%

Rationale: CVE describes indirect prompt injection vulnerability in HCL AION leading to HTML injection.

Classifier: Qwen/Qwen3.5-35B-A3B-FP8

Visit source