Skip to content
CVE PROGRAM SOURCE RECORD1.0 Low

CVE-2026-16791

Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
lenovo

Description

A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo XClarity Essentials OneCLI

Default version status: unaffected

  • 0 to < 5.6affected

References