---
id: CVE-2026-89057
title: >-
  A potential authentication bypass vulnerability was reported in some Lenovo
  tablets that could allow a user with physical access to gain unauthorized
  device access.
summary: >-
  A potential authentication bypass vulnerability was reported in some Lenovo
  tablets that could allow a user with physical access to gain unauthorized
  device access.
severity: medium
cvss: 6.8
cvssVector: 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-288
vendor: Lenovo
product: Idea Tab Pro (TB373FU)
affected:
  - idea_tab_pro_tb373fu < 17.5.10.107
  - idea_tab_lenovo_tab_k11_gen_2_tb336fu < 17.5.10.348
  - >-
    idea_tab_lenovo_tab_k11_gen_2_tb336fu_tb336zu < TB336FU：17.5.10.348
    ,TB336ZU：17.5.10.354
  - idea_tab_lenovo_tab_k11_gen_2_tb336zu < 17.5.10.354
  - legion_tab_8.8_3_tb321fu < 17.5.10.319
  - tab_m11_tb330fu < 17.0.135
  - tab_m11_tb330fu_tb330xu < 17.0.517
  - tab_m11_tb330xu < 17.0.517
  - tab_extreme_tb570fu < 17.5.589
  - tab_extreme_tb570zu < 17.5.589
  - tab_extreme_tb570zu_tb570fu < 17.5.589
  - tab_k11_tb330fup < 17.0.135
  - tab_k11_tb330xup < 17.0.157
  - tab_k11_plus_tb352fu < 17.0.10.344
  - tab_k11_plus_tb352xu < 17.0.10.336
  - tab_k11_plus_lte_row_tb352xu < 17.0.10.336
  - tab_k11_plus_wifi_row_tb352fu < 17.0.10.344
  - tab_m10_5g_tb360zu < 16.0.939
  - tab_k9_tb305fu < 17.0.10.324
  - tab_k9_tb305xu < 17.0.10.318
  - tab_one_tb305fu < 17.0.10.324
  - tab_one_tb305xu < 17.0.10.254
  - tab_p12_tb370fu < 17.0.352
  - 'tab_p12_tb370fu_tb372fu < TB370FU：17.0.352, TB372FC：17.0.223'
  - tab_p12_tb372fu < 17.0.223
  - tab_plus_tb351fu < 17.5.10.199
  - tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu < 17.5.36.417
  - >-
    tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu_tb311xu <
    TB311FU：17.5.36.417 ,TB311XU：17.5.37.350
  - tab_with_clear_case_lenovo_tab_with_folio_case_tb311xu < 17.5.37.350
  - yoga_tab_tb710fu < 17.5.04.082
  - yoga_tab_plus_tb520fu < 17.5.10.362
published: '2026-10-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T23:17:37.340Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-89057'
references:
  - url: 'https://support.lenovo.com/us/en/product_security/LEN-218699'
tags:
  - cve.org
ingestedAt: '2026-10-15T23:54:16.913Z'
---

## Overview

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.

## Affected

- `idea_tab_pro_tb373fu < 17.5.10.107`
- `idea_tab_lenovo_tab_k11_gen_2_tb336fu < 17.5.10.348`
- `idea_tab_lenovo_tab_k11_gen_2_tb336fu_tb336zu < TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354`
- `idea_tab_lenovo_tab_k11_gen_2_tb336zu < 17.5.10.354`
- `legion_tab_8.8_3_tb321fu < 17.5.10.319`
- `tab_m11_tb330fu < 17.0.135`
- `tab_m11_tb330fu_tb330xu < 17.0.517`
- `tab_m11_tb330xu < 17.0.517`
- `tab_extreme_tb570fu < 17.5.589`
- `tab_extreme_tb570zu < 17.5.589`
- `tab_extreme_tb570zu_tb570fu < 17.5.589`
- `tab_k11_tb330fup < 17.0.135`
- `tab_k11_tb330xup < 17.0.157`
- `tab_k11_plus_tb352fu < 17.0.10.344`
- `tab_k11_plus_tb352xu < 17.0.10.336`
- `tab_k11_plus_lte_row_tb352xu < 17.0.10.336`
- `tab_k11_plus_wifi_row_tb352fu < 17.0.10.344`
- `tab_m10_5g_tb360zu < 16.0.939`
- `tab_k9_tb305fu < 17.0.10.324`
- `tab_k9_tb305xu < 17.0.10.318`
- `tab_one_tb305fu < 17.0.10.324`
- `tab_one_tb305xu < 17.0.10.254`
- `tab_p12_tb370fu < 17.0.352`
- `tab_p12_tb370fu_tb372fu < TB370FU：17.0.352, TB372FC：17.0.223`
- `tab_p12_tb372fu < 17.0.223`
- `tab_plus_tb351fu < 17.5.10.199`
- `tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu < 17.5.36.417`
- `tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu_tb311xu < TB311FU：17.5.36.417 ,TB311XU：17.5.37.350`
- `tab_with_clear_case_lenovo_tab_with_folio_case_tb311xu < 17.5.37.350`
- `yoga_tab_tb710fu < 17.5.04.082`
- `yoga_tab_plus_tb520fu < 17.5.10.362`

## Remediation

Update to the version (or higher) as recommended in the advisory - https://support.lenovo.com/us/en/product_security/LEN-218699