Medium severity · published Oct 15, 2026
CVE-2026-89057
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access
6.8
CVSS
0.2%
EPSS
No
On KEV
Description
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IT
Idea Tab Pro (TB373FU) · Lenovo
before 17.5.10.107 · source: vendor
IT
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) · Lenovo
before 17.5.10.348 · source: vendor
IT
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) · Lenovo
before TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354 · source: vendor
IT
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU) · Lenovo
before 17.5.10.354 · source: vendor
LT
Legion Tab (8.8", 3) (TB321FU) · Lenovo
before 17.5.10.319 · source: vendor
TE
Tab Extreme (TB570FU) · Lenovo
before 17.5.589 · source: vendor
TE
Tab Extreme (TB570ZU) · Lenovo
before 17.5.589 · source: vendor
TE
Tab Extreme (TB570ZU/TB570FU) · Lenovo
before 17.5.589 · source: vendor
TK
Tab K11 (TB330FUP) · Lenovo
before 17.0.135 · source: vendor
TK
Tab K11 (TB330XUP) · Lenovo
before 17.0.157 · source: vendor
TK
Tab K11 Plus (TB352FU) · Lenovo
before 17.0.10.344 · source: vendor
TK
Tab K11 Plus (TB352XU) · Lenovo
before 17.0.10.336 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-89057
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-89057
support.lenovo.com
https://support.lenovo.com/us/en/product_security/LEN-218699
More from Idea Tab Pro (TB373FU)
6.4
CVE-2026-92777
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary…