Low WID-SEC-2026-2646 1 CVE

Lenovo XClarity (OneCLI): Schwachstelle ermöglicht Manipulation von Dateien

Published Aug 4, 2026 · Updated Aug 4, 2026 · de-DE

Vendor: Lenovo Product: XClarity Platform: Linux

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Lenovo XClarity (OneCLI) ausnutzen, um Dateien zu manipulieren.

Product

Lenovo XClarity ist ein Verwaltungswerkzeug für Rechenzentren.

Vulnerabilities 1

Low 3.9

CVE-2026-16791

Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI

A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed wi…

Lenovo XClarity Essentials OneCLI

Aug 4, 2026

Revision history

2026-08-04 #1
Initiale Fassung

References

Lenovo Security Advisory LEN-216072 vom 2026-08-04
https://support.lenovo.com/us/en/product_security/LEN-216072
GitHub Advisory Database vom 2026-08-04
https://github.com/advisories/GHSA-FRPQ-FXQ8-73PM