File Manager (Chinese Market Distribution) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/file-manager-chinese-market-distribution/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 10 Sep 2026 23:10:25 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgImproper Authorization Vulnerability in Lenovo File Manager Android Apphttps://feed.craftedsignal.io/briefs/2026-09-lenovo-file-manager-vuln/Thu, 10 Sep 2026 23:10:25 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-lenovo-file-manager-vuln/A local improper authorization vulnerability in the Lenovo File Manager Android app allows authenticated local users to read or modify protected application files.An improper authorization vulnerability (CVE-2026-18994) has been identified in the Lenovo File Manager Android application. This vulnerability is specific to the version of the application distributed within the Chinese market. It allows a local, authenticated user to bypass existing authorization controls, granting them the ability to read or modify protected files maintained by the application. This could lead to unauthorized data exposure or manipulation of sensitive user data stored within the app's directory. Defenders should note that this is a local attack vector requiring the adversary to have already gained access to the mobile device or have an application running with sufficient permissions to interface with the Lenovo File Manager.

Impact

The vulnerability affects the Lenovo File Manager application distributed in the Chinese market. Successful exploitation allows a local user to gain unauthorized access to protected file resources, potentially resulting in data exfiltration or corruption. The CVSS base score for this vulnerability is 7.1.

Recommendation

Prioritize the identification of Lenovo File Manager installations on mobile devices managed within the organization. Check for updates provided via the official vendor channels for the Chinese market and apply patches immediately. As this is a local privilege escalation vector, audit Android permissions and ensure that only trusted applications are installed on devices that have access to corporate data.

]]>highadvisoryvulnerabilityandroidprivilege-escalation