CVE-2026-19136

A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application.

Score
CVSS 4.0 8.4 High
Status
Deferred - psirt@lenovo.com
Published
2026-09-10
Last modified
2026-09-11
Weaknesses
CWE-78

Affected products

References

 
 
© AVABIS GmbH privacypolicy about