Authentication Bypass Vulnerability in Lenovo Tablets
CVE-2026-89057
7HIGH
Key Information:
- Vendor
Lenovo
- Status
- Vendor
- CVE Published:
- 15 October 2026
What is CVE-2026-89057?
A vulnerability has been identified in various Lenovo tablet models that poses a risk of authentication bypass. This security issue allows an attacker with physical access to the device to bypass authentication mechanisms, potentially gaining unauthorized control over the device, which could lead to data theft or other malicious activities. Users are urged to remain vigilant and implement security measures to protect their devices.
Affected Version(s)
Idea Tab Pro (TB373FU) 0 < 17.5.10.107
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) 0 < 17.5.10.348
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) 0
References
CVSS V4
Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Lenovo thanks Deepak Toshniwal and Ayansh Toshniwal for reporting this issue.