CVE-2026-89057
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.
- Score
- CVSS 4.0 7.0 High
- Status
- Awaiting Analysis - psirt@lenovo.com
- Published
- 2026-10-15
- Last modified
- 2026-10-16
- Weaknesses
- CWE-288
Affected products
- Idea Tab Lenovo Tab K11 Gen 2 Tb336fu (Lenovo)
- Idea Tab Lenovo Tab K11 Gen 2 Tb336fu Tb336zu (Lenovo)
- Idea Tab Lenovo Tab K11 Gen 2 Tb336zu (Lenovo)
- Idea Tab Pro Tb373fu (Lenovo)
- Legion Tab 8.8 3 Tb321fu (Lenovo)
- Tab Extreme Tb570fu (Lenovo)
- Tab Extreme Tb570zu (Lenovo)
- Tab Extreme Tb570zu Tb570fu (Lenovo)
- Tab K11 Plus Lte Row Tb352xu (Lenovo)
- Tab K11 Plus Tb352fu (Lenovo)
- Tab K11 Plus Tb352xu (Lenovo)
- Tab K11 Plus Wifi Row Tb352fu (Lenovo)
- Tab K11 Tb330fup (Lenovo)
- Tab K11 Tb330xup (Lenovo)
- Tab K9 Tb305fu (Lenovo)
- Tab K9 Tb305xu (Lenovo)
- Tab M10 5g Tb360zu (Lenovo)
- Tab M11 Tb330fu (Lenovo)
- Tab M11 Tb330fu Tb330xu (Lenovo)
- Tab M11 Tb330xu (Lenovo)
- Tab One Tb305fu (Lenovo)
- Tab One Tb305xu (Lenovo)
- Tab P12 Tb370fu (Lenovo)
- Tab P12 Tb370fu Tb372fu (Lenovo)
- Tab P12 Tb372fu (Lenovo)
- Tab Plus Tb351fu (Lenovo)
- Tab With Clear Case Lenovo Tab With Folio Case Tb311fu (Lenovo)
- Tab With Clear Case Lenovo Tab With Folio Case Tb311fu Tb311xu (Lenovo)
- Tab With Clear Case Lenovo Tab With Folio Case Tb311xu (Lenovo)
- Yoga Tab Plus Tb520fu (Lenovo)
- Yoga Tab Tb710fu (Lenovo)
References
- https://support.lenovo.com/us/en/product_security/LEN-218699
