CVE-2026-16791

A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges.

Score

CVSS 3.1 3.9 Low

Status

Awaiting Analysis - psirt@lenovo.com

Published

2026-08-04

Last modified

2026-10-24

Weaknesses

CWE-377

Affected products

• Xclarity Essentials Onecli (Lenovo)

References

• https://support.lenovo.com/us/en/solutions/ht116433