CVE-2026-18994

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application.

Score

CVSS 4.0 8.4 High

Status

Deferred - psirt@lenovo.com

Published

2026-09-10

Last modified

2026-09-11

Weaknesses

CWE-926

Affected products

• File Manager Application (Lenovo)

References

• https://iknow.lenovo.com.cn/detail/442247