CVE-2025-10699: Medium severity Lenovo LeCloud client vulnerability
A vulnerability was reported in the Lenovo LeCloud client application that, under certain conditions, could allow information disclosure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Lenovo LeCloud client applicationfrom your environment.Discontinue use of the Lenovo LeCloud client application because it is no longer supported.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10699?
CVE-2025-10699 has been classified as a medium severity vulnerability.
How do I fix CVE-2025-10699?
To fix CVE-2025-10699, ensure you are using the latest version of the Lenovo LeCloud client application.
What type of information can be disclosed due to CVE-2025-10699?
CVE-2025-10699 can allow sensitive information from the Lenovo LeCloud client application to be disclosed under specific conditions.
Which versions of the Lenovo LeCloud client are affected by CVE-2025-10699?
All releases of the Lenovo LeCloud client application that are below the latest update are potentially affected by CVE-2025-10699.
Is there a workaround for CVE-2025-10699 while waiting for a fix?
Currently, there are no known workarounds for CVE-2025-10699, so users should apply the patch as soon as it is available.