CVE-2026-13103

HighCVSS 7.3

Published: 16/07/2026(UTC)Updated: 16/07/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market. This flaw could allow a local authenticated user to execute arbitrary code.

Risk Assessment

The risk for the organization is the potential for privilege escalation by a local user, which could lead to system compromise and data theft.

Recommendation

It is recommended to immediately update Lenovo App Store to the latest version available from the vendor and restrict application access to trusted users only.

Other vulnerabilities in Lenovo App Store

CVE-2026-13104High
A vulnerability in Lenovo App Store, distributed exclusively in the Chinese market, could allow a local authenticated user to execute arbitrary code with elevated privileges.

Original NVD description (English source)

A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code.