CVE-2026-16791
LowCVSS 3.9Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges.
Risk Assessment
A local attacker could overwrite or truncate critical system files, potentially leading to system damage or privilege escalation.
Recommendation
Upgrade Lenovo XClarity Essentials OneCLI to a version newer than 5.5.0 if available. Restricting execution with elevated privileges may reduce risk.
Original NVD description (English source)
A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges.