Lenovo vulnerabilities
We track 109 vulnerabilities in Lenovo products across 60+ products. 109 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 11, 2026.
Latest Lenovo vulnerabilities
- 8.5 High severity
OneCLI: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command in the remote SSH operation functionality of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could allow an attacker to execute arbitrary OS commands with the privileges of the configured SSH
- 7.2 High severity
XClarity Integrator for WAC: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname
- 7.8 High severity
PC Manager: Incorrect Default Permissions
During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager, distributed exclusively in the Chinese market, that could allow a local user to escalate privileges.
- 7.8 High severity
System Update: Deserialization of Untrusted Data
A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges.
- 7.3 High severity
System Update: Incorrect Default Permissions
An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges.
- 7.1 High severity
Idea Tab Pro TB373FU: Improper Export of Android Application Components
A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write with elevated privileges.
- 7.3 High severity
Baiying PC Client: Missing Authorization
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.
- 8.0 High severity
Legion Zone Application: Deserialization of Untrusted Data
A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.
- 9.1 Critical severity
Health Application: Use of Hard-coded Credentials
A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related information.
- 7.8 High severity
Software Fix: Authentication Bypass by Spoofing
An authentication bypass vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.
- 7.8 High severity
Tianxi AI Agent PC Application: Improper Neutralization of Special Elements used in an OS Command
A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is hand
- 7.1 High severity
File Manager Application: Improper Export of Android Application Components
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application.
- 7.8 High severity
FileZ Client: Incorrect Default Permissions
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges.
- 7.0 High severity
System Update: Authentication Bypass by Spoofing
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.
- 7.1 High severity
Dock Manager: Improper Link Resolution Before File Access
During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.
- 7.8 High severity
Dock Manager: Incorrect Default Permissions
During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges.
- 7.3 High severity
Dock Manager: Weak Encoding for Password
During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.
- 7.8 High severity
Accessories and Display Manager: Use of Hard-coded Cryptographic Key
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.
- 7.0 High severity
Commercial Vantage: Improper Link Resolution Before File Access
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.
- 7.1 High severity
Vantage: Improper Link Resolution Before File Access
An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.
- 8.8 High severity
An improper neutralization of special elements used in an operating system command…
An improper neutralization of special elements used in an operating system command vulnerability was reported in Lenovo XClarity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to execute arbitrary operating system commands as a privileged
- 7.0 High severity
Legion Zone: Insecure Inherited Permissions
A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrar
- 8.8 High severity
XClarity Integrator for Microsoft Windows…: Improper Neutralization of Special Elements used in an OS Command
The Lenovo XClarity Integrator for Windows Admin Center plugin version 5.1.1 and below running on the WAC Gateway is vulnerable to Powershell Command Injection when establishing remote PowerShell commands.
- 7.3 High severity
App Store: Execution with Unnecessary Privileges
A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.
- 7.3 High severity
App Store: Improper Limitation of a Pathname to a Restricted Directory
A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code.
- 7.8 High severity
Accessories and Display Manager for Enterprise: Missing Authentication for Critical Functionality
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.
- 7.8 High severity
LanSchool Classic: Uncontrolled Search Path Element
A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code with elevated privileges.
- 7.0 High severity
Smart Connect: Authentication Bypass by Spoofing
A potential authentication bypass was reported in Lenovo Smart Connect for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges.
- 8.1 High severity
Personal Cloud T2s: Improper Limitation of a Pathname to a Restricted Directory
A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device.
- 8.8 High severity
Personal Cloud T2s: Improper Neutralization of Special Elements used in an OS Command
A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbitrary commands on the device.
- 7.8 High severity
Software Fix: Improper Neutralization of Argument Delimiters in a Command
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges.
- 7.3 High severity
Software Fix: Uncontrolled Search Path Element
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute code with elevated privileges.
- 7.1 High severity
Diagnostics: Improper Link Resolution Before File Access
During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an
- 7.1 High severity
FileZ: Improper Certificate Validation
An improper certificate validation vulnerability was reported in the Lenovo Filez application that could allow a user capable of intercepting network traffic to execute arbitrary code.
- 7.1 High severity
Vantage: Improper Neutralization of Argument Delimiters in a Command
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete arbitrary registry keys with elevated privileges.
- 7.1 High severity
Vantage: Improper Neutralization of Argument Delimiters in a Command
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to modify arbitrary registry keys with elevated privileges.
- 7.8 High severity
ThinkPlus FU100: Authentication Bypass by Spoofing
A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.
- 7.8 High severity
Baiying Client: Incorrect Default Permissions
An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user to execute code with elevated privileges.
- 7.8 High severity
One Client: Uncontrolled Search Path Element
A potential DLL hijacking vulnerability was reported in Lenovo One Client during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges.
- 7.8 High severity
App Store: Uncontrolled Search Path Element
A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions.