CVEvulnerability

CVE-2025-31951

8.8 HIGH Published 2026-05-06 Modified 2026-10-07 Official page ↗
Status
Awaiting Analysis
Published
2026-05-06
Last modified
2026-10-07
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-351, CWE-451, CWE-77

Description

HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's input handling was identified that could permit unauthorized command execution.

Related

Weakness · CWE (3)

  • CWE-351 Insufficient Type Distinction weakness
  • CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness
  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References