Lenovo Diagnostics HWScanAddin Arbitrary File Write via Local Auth
CVE-2026-0827 Published on April 15, 2026
During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.
Vulnerability Analysis
CVE-2026-0827 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity and availability.
Weakness Type
What is an insecure temporary file Vulnerability?
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
CVE-2026-0827 has been classified to as an insecure temporary file vulnerability or weakness.
Products Associated with CVE-2026-0827
stack.watch emails you whenever new vulnerabilities are published in Lenovo Diagnostics or Lenovo Vantage. Just hit a watch button to start following.
Affected Versions
Lenovo Diagnostics:- Before 5.26.0 is affected.
- Before 4.7.1.4 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.