Lenovo Tablet Auth Bypass via Physical Access
CVE-2026-89057 Published on October 15, 2026

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-89057 can be exploited with physical access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:

PHYSICAL

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

NONE

Weakness Type

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

Products Associated with CVE-2026-89057

Want to know whenever a new CVE is published for Lenovo products? stack.watch will email you.

Lenovo Idea Tab Pro Tb373fu

Idea Tab Lenovo Tab K11 Gen 2 Tb336fu

Idea Tab Lenovo Tab K11 Gen 2 Tb336fu Tb336zu

Idea Tab Lenovo Tab K11 Gen 2 Tb336zu

Lenovo Legion Tab 8 8 3 Tb321fu

Lenovo Tab M11 Tb330fu

Lenovo Tab M11 Tb330fu Tb330xu

Lenovo Tab M11 Tb330xu

Lenovo Tab Extreme Tb570fu

Lenovo Tab Extreme Tb570zu

Lenovo Tab Extreme Tb570zu Tb570fu

Lenovo Tab K11 Tb330fup

Lenovo Tab K11 Tb330xup

Lenovo Tab K11 Plus Tb352fu

Lenovo Tab K11 Plus Tb352xu

Lenovo Tab K11 Plus Lte Row Tb352xu

Lenovo Tab K11 Plus Wifi Row Tb352fu

Lenovo Tab M10 5g Tb360zu

Lenovo Tab K9 Tb305fu

Lenovo Tab K9 Tb305xu

Lenovo Tab One Tb305fu

Lenovo Tab One Tb305xu

Lenovo Tab P12 Tb370fu

Lenovo Tab P12 Tb370fu Tb372fu

Lenovo Tab P12 Tb372fu

Lenovo Tab Plus Tb351fu

Tab With Clear Case Lenovo Tab With Folio Case Tb311fu

Tab With Clear Case Lenovo Tab With Folio Case Tb311fu Tb311xu

Tab With Clear Case Lenovo Tab With Folio Case Tb311xu

Lenovo Yoga Tab Tb710fu

Lenovo Yoga Tab Plus Tb520fu

Affected Versions

Lenovo Idea Tab Pro (TB373FU):

Before 17.5.10.107 is affected.

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU):

Before 17.5.10.348 is affected.

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU):

Before TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354 is affected.

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU):

Before 17.5.10.354 is affected.

Lenovo Legion Tab (8.8", 3) (TB321FU):

Before 17.5.10.319 is affected.

Lenovo Tab M11 (TB330FU):

Before 17.0.135 is affected.

Lenovo Tab M11 (TB330FU/TB330XU):

Before 17.0.517 is affected.

Lenovo Tab M11 (TB330XU):

Before 17.0.517 is affected.

Lenovo Tab Extreme (TB570FU):

Before 17.5.589 is affected.

Lenovo Tab Extreme (TB570ZU):

Before 17.5.589 is affected.

Lenovo Tab Extreme (TB570ZU/TB570FU):

Before 17.5.589 is affected.

Lenovo Tab K11 (TB330FUP):

Before 17.0.135 is affected.

Lenovo Tab K11 (TB330XUP):

Before 17.0.157 is affected.

Lenovo Tab K11 Plus (TB352FU):

Before 17.0.10.344 is affected.

Lenovo Tab K11 Plus (TB352XU):

Before 17.0.10.336 is affected.

Lenovo Tab K11 Plus LTE ROW (TB352XU):

Before 17.0.10.336 is affected.

Lenovo Tab K11 Plus WIFI ROW: TB352FU:

Before 17.0.10.344 is affected.

Lenovo Tab M10 5G (TB360ZU):

Before 16.0.939 is affected.

Lenovo Tab K9 (TB305FU):

Before 17.0.10.324 is affected.

Lenovo Tab K9 (TB305XU):

Before 17.0.10.318 is affected.

Lenovo Tab One (TB305FU):

Before 17.0.10.324 is affected.

Lenovo Tab One (TB305XU):

Before 17.0.10.254 is affected.

Lenovo Tab P12 (TB370FU):

Before 17.0.352 is affected.

Lenovo Tab P12 (TB370FU/TB372FU):

Before TB370FU：17.0.352, TB372FC：17.0.223 is affected.

Lenovo Tab P12 (TB372FU):

Before 17.0.223 is affected.

Lenovo Tab Plus (TB351FU):

Before 17.5.10.199 is affected.

Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU):

Before 17.5.36.417 is affected.

Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU):

Before TB311FU：17.5.36.417 ,TB311XU：17.5.37.350 is affected.

Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU):

Before 17.5.37.350 is affected.

Lenovo Yoga Tab (TB710FU):

Before 17.5.04.082 is affected.

Lenovo Yoga Tab Plus (TB520FU):