CVE-2026-16791 — Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI

CVE-2026-16791

Predictable Temporary File Symlink Vulnerability in Lenovo XClarity Essentials OneCLI PUBLISHED

Description (CNA)

A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges.

Affected (CNA)

Vendor / product	Versions
Lenovo / XClarity Essentials OneCLI	affected 0 before 5.6

CWE

CWE-377

References

https://support.lenovo.com/us/en/solutions/ht116433

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.