CVE-2026-9046: High severity Lenovo Legion Zone vulnerability
A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Lenovo App Store (Windows application)to a version that resolves this vulnerability.Fixed in 9.0.29 - Upgrade
Upgrade
Lenovo Legion Zone (Windows application)to a version that resolves this vulnerability.Fixed in 2.0.26
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9046?
CVE-2026-9046 has a severity rating of high, classified as 7 out of 10.
How do I fix CVE-2026-9046?
To mitigate CVE-2026-9046, ensure that the affected applications are installed on the system partition and review user permissions.
What systems are affected by CVE-2026-9046?
CVE-2026-9046 affects the Lenovo App Store and Legion Zone applications specifically distributed in the Chinese market.
What exploitation risks are associated with CVE-2026-9046?
CVE-2026-9046 presents a risk where a local user could execute arbitrary code if the application is installed on a non-system partition.
When was CVE-2026-9046 published?
CVE-2026-9046 was published on July 16, 2026.