CVE-2025-31951

HighCVSS 8.8

Published: 06/05/2026(UTC)Updated: 07/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

15th percentile - higher than 15% of all known CVEs

Summary

HCL BigFix RunBookAI is affected by a vulnerability related to unvalidated command input, which could allow unauthorized command execution. A flaw in a component's input handling was identified.

Risk Assessment

This vulnerability could allow attackers to execute arbitrary commands on the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update HCL BigFix RunBookAI to the latest version and implement input validation mechanisms to minimize the risk of unauthorized access.

Other vulnerabilities in HCL BigFix RunBookAI

CVE-2025-62345Low
HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure 'Input Text' Vulnerability. A component contains a security weakness in its input handling implementation, increasing the risk of misconfiguration and operational errors.

Original NVD description (English source)

HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's input handling was identified that could permit unauthorized command execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS