{"id":"CVE-2026-89057","title":"A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.","summary":"A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-288"],"vendor":"Lenovo","product":"Idea Tab Pro (TB373FU)","affected":["idea_tab_pro_tb373fu < 17.5.10.107","idea_tab_lenovo_tab_k11_gen_2_tb336fu < 17.5.10.348","idea_tab_lenovo_tab_k11_gen_2_tb336fu_tb336zu < TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354","idea_tab_lenovo_tab_k11_gen_2_tb336zu < 17.5.10.354","legion_tab_8.8_3_tb321fu < 17.5.10.319","tab_m11_tb330fu < 17.0.135","tab_m11_tb330fu_tb330xu < 17.0.517","tab_m11_tb330xu < 17.0.517","tab_extreme_tb570fu < 17.5.589","tab_extreme_tb570zu < 17.5.589","tab_extreme_tb570zu_tb570fu < 17.5.589","tab_k11_tb330fup < 17.0.135","tab_k11_tb330xup < 17.0.157","tab_k11_plus_tb352fu < 17.0.10.344","tab_k11_plus_tb352xu < 17.0.10.336","tab_k11_plus_lte_row_tb352xu < 17.0.10.336","tab_k11_plus_wifi_row_tb352fu < 17.0.10.344","tab_m10_5g_tb360zu < 16.0.939","tab_k9_tb305fu < 17.0.10.324","tab_k9_tb305xu < 17.0.10.318","tab_one_tb305fu < 17.0.10.324","tab_one_tb305xu < 17.0.10.254","tab_p12_tb370fu < 17.0.352","tab_p12_tb370fu_tb372fu < TB370FU：17.0.352, TB372FC：17.0.223","tab_p12_tb372fu < 17.0.223","tab_plus_tb351fu < 17.5.10.199","tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu < 17.5.36.417","tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu_tb311xu < TB311FU：17.5.36.417 ,TB311XU：17.5.37.350","tab_with_clear_case_lenovo_tab_with_folio_case_tb311xu < 17.5.37.350","yoga_tab_tb710fu < 17.5.04.082","yoga_tab_plus_tb520fu < 17.5.10.362"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-16T18:57:50.385384Z"},"published":"2026-10-15","updated":"2026-10-16","sourceUpdated":"2026-10-16T18:58:59.760Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89057","references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-218699"}],"tags":["cve.org"],"epss":0.00294,"epssPercentile":0.20608,"ingestedAt":"2026-10-15T23:54:16.913Z","slug":"CVE-2026-89057","body":"## Overview\n\nA potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.\n\n## Affected\n\n- `idea_tab_pro_tb373fu < 17.5.10.107`\n- `idea_tab_lenovo_tab_k11_gen_2_tb336fu < 17.5.10.348`\n- `idea_tab_lenovo_tab_k11_gen_2_tb336fu_tb336zu < TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354`\n- `idea_tab_lenovo_tab_k11_gen_2_tb336zu < 17.5.10.354`\n- `legion_tab_8.8_3_tb321fu < 17.5.10.319`\n- `tab_m11_tb330fu < 17.0.135`\n- `tab_m11_tb330fu_tb330xu < 17.0.517`\n- `tab_m11_tb330xu < 17.0.517`\n- `tab_extreme_tb570fu < 17.5.589`\n- `tab_extreme_tb570zu < 17.5.589`\n- `tab_extreme_tb570zu_tb570fu < 17.5.589`\n- `tab_k11_tb330fup < 17.0.135`\n- `tab_k11_tb330xup < 17.0.157`\n- `tab_k11_plus_tb352fu < 17.0.10.344`\n- `tab_k11_plus_tb352xu < 17.0.10.336`\n- `tab_k11_plus_lte_row_tb352xu < 17.0.10.336`\n- `tab_k11_plus_wifi_row_tb352fu < 17.0.10.344`\n- `tab_m10_5g_tb360zu < 16.0.939`\n- `tab_k9_tb305fu < 17.0.10.324`\n- `tab_k9_tb305xu < 17.0.10.318`\n- `tab_one_tb305fu < 17.0.10.324`\n- `tab_one_tb305xu < 17.0.10.254`\n- `tab_p12_tb370fu < 17.0.352`\n- `tab_p12_tb370fu_tb372fu < TB370FU：17.0.352, TB372FC：17.0.223`\n- `tab_p12_tb372fu < 17.0.223`\n- `tab_plus_tb351fu < 17.5.10.199`\n- `tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu < 17.5.36.417`\n- `tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu_tb311xu < TB311FU：17.5.36.417 ,TB311XU：17.5.37.350`\n- `tab_with_clear_case_lenovo_tab_with_folio_case_tb311xu < 17.5.37.350`\n- `yoga_tab_tb710fu < 17.5.04.082`\n- `yoga_tab_plus_tb520fu < 17.5.10.362`\n\n## Remediation\n\nUpdate to the version (or higher) as recommended in the advisory - https://support.lenovo.com/us/en/product_security/LEN-218699","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":37.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}