CVE-2026-6282
HighSummary
A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device.
Risk Assessment
This vulnerability may lead to unauthorized access to other users' data, posing a risk to privacy and information security.
Recommendation
It is recommended to update Lenovo Personal Cloud Storage devices to the latest software version to patch this vulnerability and implement additional access control measures.
Other vulnerabilities in Lenovo Personal Cloud Storage devices
Original NVD description (English source)
A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device.