Lenovo Tablets: Arbitrary file write vulnerability (CVE-2026-116633)
A vulnerability in specific Lenovo Tablets allows a third-party application to perform an arbitrary file write with elevated privileges, potentially resulting in privilege escalation.
CVE search metadata
CVE search record: CVE-2026-116633. Severity: high. CVSS: 7.1. KEV: no. Product: Lenovo Tablets. Brief: Lenovo Tablets: Arbitrary file write vulnerability (CVE-2026-116633). Brief link: https://feed.craftedsignal.io/briefs/2026-11-lenovo-arbitrary-file-write-cve-2026-116633/
Triage facts
Revision 1- Applicability
- Lenovo Tablets
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Nov 11, 17:58 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Roughly even chance
CVE-2026-116633 describes an arbitrary file write vulnerability affecting certain Lenovo Tablets. This flaw permits a third-party application to write files to arbitrary locations with elevated privileges, creating a risk for local privilege escalation. Details regarding the specific affected hardware models or firmware versions remain undisclosed in the current advisory.
Impact
Successful exploitation allows a third-party application to overwrite system or sensitive files with elevated privileges, which can be leveraged for privilege escalation or persistence on the affected device.
Recommendation
Monitor Lenovo security bulletins for official patches addressing CVE-2026-116633 for your specific hardware models. Given the potential for privilege escalation, restrict the installation of third-party applications on tablets used in sensitive operational environments until vendor updates are applied.
Immediate actions
Inventory all Lenovo tablet devices currently in production to prepare for future patch management.
Threat Hunt
Monitor for anomalous file modifications in system directories originating from third-party application packages.
Data: Android system logs, File integrity monitoring logs