High severity7.1NVD Advisory· Published Aug 13, 2026· Updated Aug 24, 2026

CVE-2026-12036

Description

An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.

Affected products

Lenovo/VantageCoreAddinllm-fuzzy
Lenovo/Vantagellm-fuzzy
Lenovo/Commercial Vantagellm-fuzzy

Patches

Vulnerability mechanics

References

support.lenovo.com/us/en/product_security/LEN-223723nvd

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000