Description
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges.
Published: 2026-09-10
Score: 8.5 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

Update Filez Windows Application Enterprise version to 11.5.1.0 or later.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 10 Sep 2026 21:15:00 +0000

Type Values Removed Values Added
Description A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges.
First Time appeared Lenovo
Lenovo filez Client
Lenovo filez Enterprise
Weaknesses CWE-276
CPEs cpe:2.3:a:lenovo:filez_client:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:filez_enterprise:*:*:*:*:*:*:*:*
Vendors & Products Lenovo
Lenovo filez Client
Lenovo filez Enterprise
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Lenovo Filez Client Filez Enterprise
cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2026-09-10T21:00:31.582Z

Reserved: 2026-06-09T15:53:47.545Z

Link: CVE-2026-11813

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-09-10T21:17:18.357

Modified: 2026-09-10T21:34:43.440

Link: CVE-2026-11813

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-276

    Incorrect Default Permissions