Lenovo XClarity Essentials OneCLI: Command injection via remote path (CVE-2026-65952)
CVE-2026-65952 is a command injection vulnerability in the remote SSH operation functionality of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux that allows execution of arbitrary OS commands with the privileges of the configured SSH account on a managed server by supplying a crafted remote path.
CVE search metadata
CVE search record: CVE-2026-65952. Severity: high. CVSS: 8.5. KEV: no. Product: XClarity Essentials OneCLI. Brief: Lenovo XClarity Essentials OneCLI: Command injection via remote path (CVE-2026-65952). Brief link: https://feed.craftedsignal.io/briefs/2026-11-cve-2026-65952-lenovo/
Triage facts
Revision 1- Applicability
- XClarity Essentials OneCLI
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 00:09 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Lenovo XClarity Essentials OneCLI 5.5.0 for Linux is affected by an improper neutralization of special elements used in an OS command within its remote SSH operation functionality.
Impact
Successful exploitation allows an attacker to execute arbitrary OS commands with the privileges of the configured SSH account on a managed server by supplying a specially crafted remote path.
Recommendation
Review documentation from Lenovo for updates regarding this issue.