EUVD-2026-64840
GHSA-mjvg-8gf9-v7m8
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Network-reachable with low complexity but PR:H required; full C/I/A impact reflects arbitrary malicious code introduction into production with no scope change beyond the host system.
Primary rating from Vendor (HCL).
CVSS VectorVendor: HCL
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
HCL Hive is affected by a broken access control vulnerability which could allow an attacker or unauthorized user to introduce unverified, malicious, or broken code directly into production environments.
AnalysisAI
Broken access control in HCL Hive 1.0 allows a high-privileged network attacker to bypass code verification gates and introduce unverified, malicious, or broken code directly into production environments. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) reflects full confidentiality, integrity, and availability impact against the vulnerable system, contingent on high-privilege access. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires authenticated high-privilege access (PR:H per the CVSS vector) to HCL Hive 1.0 reachable over a network. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS base score of 7.2 is calibrated by the PR:H requirement, which meaningfully narrows the attacker population to insiders, compromised administrator accounts, or lateral movers who have already achieved high privilege elsewhere in the environment. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who holds or has compromised a high-privileged HCL Hive account accesses the platform's code deployment workflow over the network and exploits the broken access control to bypass the verification or approval gate that normally prevents unreviewed code from reaching production. The attacker submits a malicious payload - such as a backdoor or destructive script - through the deployment interface, which the platform promotes directly to the production environment without standard review controls. … |
| Remediation | Organizations should immediately consult the HCL Software advisory at https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731 for patch or upgrade instructions; an exact fixed version is not independently confirmed from the available reference data, so patch applicability must be verified directly with HCL. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit all administrative user accounts with Hive 1.0 access, implement network segmentation to restrict Hive administration to dedicated jump hosts, and review recent deployment logs for unauthorized or suspicious activity. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Incorrect default permissions in HCL Hive 1.0 expose containerized deployments to unauthorized lateral movement, contain
Unauthorized system access in HCL Hive results from the product bundling third-party components that contain publicly do
HCL Hive employs a risky cryptographic primitive (CWE-1240) that creates systemic trust failure across the platform: if
HCL Hive 1.0 exposes its authentication endpoint without rate limiting, enabling unauthenticated remote attackers to con
Insufficient access control granularity in HCL Hive's Keycloak IAM instance exposes protected resources to unauthenticat
HCL Hive exposes its Swagger API documentation publicly to unauthenticated users, revealing API endpoint structures, HTT
Same weakness CWE-266 – Incorrect Privilege Assignment
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today