High severity8.1NVD Advisory· Published May 13, 2026· Updated May 13, 2026

CVE-2026-6282

Description

A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device.

Affected products

Lenovo/Personal Cloud Storagellm-create

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

iknow.lenovo.com.cn/detail/440274nvd
pc.lenovo.com.cn/tips/Ann/t1_eol.htmlnvd

News mentions

3 easy-to-miss cybersecurity risks for small businesses
Malwarebytes Labs · May 3, 2026

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000