CVE-2026-13104
Deferred Deferred - Pending Action

Local Privilege Escalation in Lenovo App Store

Publication date: 2026-07-16

Last updated on: 2026-07-16

Assigner: Lenovo Group Ltd.

Description
A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-16
Last Modified
2026-07-16
Generated
2026-07-16
AI Q&A
2026-07-16
EPSS Evaluated
N/A
NVD
CVE-2026-13104
EUVD
EUVD-2026-44977

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
lenovo app_store *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-250 The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

A vulnerability in Lenovo App Store, available only in China, allows a local authenticated user to run arbitrary code with higher privileges than intended.

Detection Guidance

Since this vulnerability affects Lenovo App Store in the Chinese market and allows local authenticated users to execute arbitrary code with elevated privileges, detection would require checking for unusual processes or files associated with the app store. However, specific commands cannot be provided as no detection methods are detailed in the available context.

Impact Analysis

If exploited, an attacker could gain control over the affected system, install malware, steal data, or perform other malicious actions with elevated permissions.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, potentially violating GDPR (data protection) or HIPAA (health data privacy) requirements if sensitive information is compromised.

Mitigation Strategies

Update Lenovo App Store to the latest version if an update is available. Remove or disable the Lenovo App Store if it is not required. Restrict local user permissions to minimize potential impact.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-13104. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart