Description
A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | XClarity Essentials OneCLI | < 5.6 | 5.6 |
Advisories 1
- WID-SEC-2026-2646 Lenovo XClarity (OneCLI): Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Aug 4, 2026
References
- https://support.lenovo.com/us/en/solutions/ht116433 patch release-notes product