6.8
Medium
CVE-2025-13154 An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow…
Description
An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Vantage 1.1 | earliest → < 1.1.0.1111 | 1.1.0.1111 |
Other CVEs of Vantage
The 15 CVEs of Vantage →
CVE-2026-15994
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and…
7.3
High
CVE-2026-12036
An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial…
6.9
Medium
CVE-2026-0827
During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the…
6.9
Medium
CVE-2026-1717
An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo…
6.8
Medium