CVE-2026-65952: OS Command Injection in Lenovo XClarity OneCLI 5.5.0 Linux

Published Nov 11, 2026

Updated

Improper neutralization of special elements used in an OS command in the remote SSH operation functionality of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could allow an attacker to execute arbitrary OS commands with the privileges of the configured SSH account on a managed server by supplying a specially crafted remote path.

Event History

Nov 11, 2026

CVE Published

via MITRE·09:12 PM

Data Sourced

via MITRE·09:12 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to exploitation?

Deployments using Lenovo XClarity Essentials OneCLI 5.5.0 for Linux and its remote SSH operation functionality are exposed, particularly where the configured SSH account has broad privileges on managed servers.

What does an attacker need to exploit the issue?

An attacker needs the ability to supply a specially crafted remote path to the affected remote SSH operation. The vulnerability metrics indicate network access, low privileges, and no user interaction are required, although exploitation complexity is high.

What is the impact of successful exploitation?

Successful exploitation can execute arbitrary operating-system commands on a managed server with the privileges of the configured SSH account. This can affect confidentiality, integrity, and availability, including across a security scope boundary.

CVE-2026-65952: OS Command Injection in Lenovo XClarity OneCLI 5.5.0 Linux

Event History

Frequently Asked Questions

Who is exposed to exploitation?

What does an attacker need to exploit the issue?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to exploitation?

What does an attacker need to exploit the issue?

What is the impact of successful exploitation?