CVE-2025-55278

Name of the Vulnerable Software and Affected Versions HCL DevOps Loop (affected versions not specified)

Description The API authentication middleware in HCL DevOps Loop does not properly validate authentication tokens, specifically regarding their expiration and cryptographic signature. This could allow an attacker to use expired or tampered tokens to gain unauthorized access to sensitive resources and perform actions with elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.