CVE-2026-18994: High severity Lenovo File Manager vulnerability
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Lenovo File Manager Android Applicationto a version that resolves this vulnerability.Fixed in 9.8.1.77
Event History
Frequently Asked Questions
Who is exposed to this issue?
The affected application is Lenovo File Manager, which is distributed exclusively in the Chinese market. Exploitation requires a local authenticated user on the Android device.
What access does an attacker need, and what could they do?
An attacker needs local access and authenticated user privileges. They may be able to read or modify files protected within the application; the provided information does not indicate any availability impact.