CVE-2025-68825— HCL Hive is affected by incorrect default permissions
Quick assessment
Affected
HCLSoftware HCL Hive
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HCL Hive 受到不正确的默认权限漏洞影响，攻击者可能借此实现未经授权的横向移动、容器逃逸，并拦截敏感的内部通信。
Possible ATT&CK Techniques 3 AI
T1021.004 · SSH T1570 · Lateral Tool Transfer T1098.001 · Additional Cloud Credentials
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-68825
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HCL Hive is affected by incorrect default permissions
Source: CVE Program / CVE List V5
Vulnerability Description
HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
缺省权限不正确
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HCLSoftware | HCL Hive | 1.0 | - |
|
II. Public POCs for CVE-2025-68825
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-68825
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-68825 (1)
Same Patch Batch · HCLSoftware · 2026-08-24 · 7 CVEs total
| CVE-2026-21752 | 7.5 HIGH | HCL Hive is affected by a use of vulnerable third-party components |
| CVE-2026-21751 | 7.4 HIGH | HCL Hive is affected by use of a cryptographic primitive with a risky implementation |
| CVE-2026-21756 | 7.2 HIGH | HCL Hive is affected by a broken access control vulnerability |
| CVE-2025-68833 | 5.3 MEDIUM | HCL Hive is affected by use of a cryptographic primitive with a risky implementation |
| CVE-2026-21755 | 5.3 MEDIUM | HCL Hive is affected by a missing rate limit |
| CVE-2026-21759 | 4.3 MEDIUM | HCL Hive is affected by an information exposure vulnerability |
IV. Related Vulnerabilities
Same product: HCL Hive
-
CVE-2026-21752
HCL Hive is affected by a use of vulnerable third-party comp -
CVE-2026-21755
HCL Hive is affected by a missing rate limit -
CVE-2025-68833
HCL Hive is affected by use of a cryptographic primitive wit -
CVE-2026-21751
HCL Hive is affected by use of a cryptographic primitive wit -
CVE-2026-21756
HCL Hive is affected by a broken access control vulnerabilit
Same vendor: HCLSoftware
-
CVE-2026-21752
HCL Hive is affected by a use of vulnerable third-party comp -
CVE-2026-21755
HCL Hive is affected by a missing rate limit -
CVE-2025-68833
HCL Hive is affected by use of a cryptographic primitive wit -
CVE-2026-21751
HCL Hive is affected by use of a cryptographic primitive wit -
CVE-2026-21756
HCL Hive is affected by a broken access control vulnerabilit
Same weakness: CWE-276
-
CVE-2026-69665
SKYSEA Client View和SKYMEC IT Manager权限错误漏洞 -
CVE-2026-78553
Insecure Flask Secret-Key File Permissions Allow Local Admin -
CVE-2026-18273
Kenwood DNR1007XR USB Incorrect Default Permissions Local Pr -
CVE-2026-58564
Dell Command Update 权限许可和访问控制问题漏洞 -
CVE-2026-19893
D-Link DIR-842 vsftpd vsftpd.conf default permission
V. Comments for CVE-2025-68825
No comments yet