CVE-2026-89057

State: Published
Severity: 7.0 High
Published: Oct 15, 2026
Updated: Oct 16, 2026
Reserved: Sep 10, 2026

Description

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.

Scores

CVSS	Score	Vector	Source
4.0	7.0 High	CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	lenovo
3.1	6.8 Medium	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	lenovo

Weaknesses

CWE-288 Authentication Bypass Using an Alternate Path or Channel

Affected Products

Product	Versions
Idea Tab Pro (TB373FU)Lenovo	before 17.5.10.107Affected
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)Lenovo	before 17.5.10.348Affected
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)Lenovo	before TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354Affected
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)Lenovo	before 17.5.10.354Affected
Legion Tab (8.8", 3) (TB321FU)Lenovo	before 17.5.10.319Affected
Tab M11 (TB330FU)Lenovo	before 17.0.135Affected
Tab M11 (TB330FU/TB330XU)Lenovo	before 17.0.517Affected
Tab M11 (TB330XU)Lenovo	before 17.0.517Affected
Tab Extreme (TB570FU)Lenovo	before 17.5.589Affected
Tab Extreme (TB570ZU)Lenovo	before 17.5.589Affected
Tab Extreme (TB570ZU/TB570FU)Lenovo	before 17.5.589Affected
Tab K11 (TB330FUP)Lenovo	before 17.0.135Affected
Tab K11 (TB330XUP)Lenovo	before 17.0.157Affected
Tab K11 Plus (TB352FU)Lenovo	before 17.0.10.344Affected
Tab K11 Plus (TB352XU)Lenovo	before 17.0.10.336Affected
Tab K11 Plus LTE ROW (TB352XU)Lenovo	before 17.0.10.336Affected
Tab K11 Plus WIFI ROW: TB352FULenovo	before 17.0.10.344Affected
Tab M10 5G (TB360ZU)Lenovo	before 16.0.939Affected
Tab K9 (TB305FU)Lenovo	before 17.0.10.324Affected
Tab K9 (TB305XU)Lenovo	before 17.0.10.318Affected
Tab One (TB305FU)Lenovo	before 17.0.10.324Affected
Tab One (TB305XU)Lenovo	before 17.0.10.254Affected
Tab P12 (TB370FU)Lenovo	before 17.0.352Affected
Tab P12 (TB370FU/TB372FU)Lenovo	before TB370FU：17.0.352, TB372FC：17.0.223Affected
Tab P12 (TB372FU)Lenovo	before 17.0.223Affected
Tab Plus (TB351FU)Lenovo	before 17.5.10.199Affected
Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU)Lenovo	before 17.5.36.417Affected
Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)Lenovo	before TB311FU：17.5.36.417 ,TB311XU：17.5.37.350Affected
Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU)Lenovo	before 17.5.37.350Affected
Yoga Tab (TB710FU)Lenovo	before 17.5.04.082Affected
Yoga Tab Plus (TB520FU)Lenovo	before 17.5.10.362Affected

References

https://support.lenovo.com/us/en/product_security/LEN-218699vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.