CVE-2025-55278 HCL DevOps Loop is susceptible to an improper authentication vulnerability
Attackers can use expired or tampered tokens to bypass authentication and gain unauthorized access to sensitive resources in HCL DevOps Loop.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-55278?
CVE-2025-55278 is a high-severity authentication bypass vulnerability in HCL Software DevOps Loop, published on 5 Nov 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized access to sensitive resources and perform actions with elevated privileges.
Which versions are affected by CVE-2025-55278?
How do I fix CVE-2025-55278?
No fix has been published for CVE-2025-55278 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-55278 being exploited?
There is no known exploitation of CVE-2025-55278 in the wild and no public exploit code.
Sources
Also known as GHSA-8gg4-hx7q-h82p.