Lenovo Smart Connect for Windows Improper Access Control CVE-2026-6511
CVE-2026-6511 Published on July 16, 2026
During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated user to access files owned by a different user on the same system.
Vulnerability Analysis
CVE-2026-6511 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Missing Authentication for Critical Function
The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Products Associated with CVE-2026-6511
Want to know whenever a new CVE is published for Lenovo Smart Connect? stack.watch will email you.
Affected Versions
Lenovo Smart Connect:- Before 09.0.2.003.000 is affected.