Medium severity5.5NVD Advisory· Published Jan 14, 2026· Updated Apr 15, 2026

CVE-2025-13154

Description

An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.

Affected products

Lenovo/SmartPerformanceAddinllm-create
Lenovo/Vantagellm-create

Patches

Vulnerability mechanics

References

support.lenovo.com/us/en/product_security/LEN-208293nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000