CVE-2026-21832: HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output. I

HCL AION has a vulnerability where indirect prompt injection (tricking an AI by hiding malicious instructions in its input data) can lead to HTML injection (inserting harmful web code) in the output that users see. This could cause unintended behavior or security problems depending on how the system is used.