CVE-2026-11813: High severity Lenovo Filez Client vulnerability

Published Sep 10, 2026

Updated

A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges.

Affected Software

1 affected component

Lenovo Filez Client

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Lenovo Filez Client (Windows Application Enterprise) to a version that resolves this vulnerability.
Fixed in 11.5.1.0
Upgrade
Upgrade Lenovo Filez Client (Windows Application) to a version that resolves this vulnerability.
Fixed in 11.7.1.0

Event History

Sep 10, 2026

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

Exploitation requires a local authenticated user. The provided information does not indicate that it can be exploited remotely or by an unauthenticated attacker.

What access and impact does exploitation involve?

An attacker needs low-level privileges on the affected system and may be able to escalate privileges. The reported impact includes high confidentiality, integrity, and availability impact.