High severity · published Aug 24, 2026
CVE-2025-68825
HCL Hive is affected by incorrect default permissions
7.5
CVSS
0.4%
EPSS
No
On KEV
Description
HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and interception of sensitive internal communications.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HH
HCL Hive · HCLSoftware
1.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-68825
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-68825
support.hcl-software.com
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131731
More from HCL Hive
7.5
CVE-2026-21752
HCL Hive is affected by a use of vulnerable third-party components
7.4
CVE-2026-21751
HCL Hive is affected by use of a cryptographic primitive with a risky implementation
7.2
CVE-2026-21756
HCL Hive is affected by a broken access control vulnerability
5.3
CVE-2026-21755
HCL Hive is affected by a missing rate limit
5.3
CVE-2025-68833
HCL Hive is affected by use of a cryptographic primitive with a risky implementation