CVE-2026-0827

During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

Score

CVSS 3.1 7.1 High

Status

Analyzed - psirt@lenovo.com

Published

2026-04-15

Last modified

2026-10-26

Weaknesses

CWE-59

Affected products

• Diagnostics (Lenovo)
• Hardware Scan (Lenovo)
• Vantage (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-210693