HCL AION has a vulnerability where certain application responses disclose internal server file system paths. This information disclosure could aid attackers in understanding the application structure, potentially facilitating further attacks. The vulnerability has a low severity score and does not directly impact integrity or availability.