CVE-2023-5079: Lenovo Lecloud

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file downloads, which could result in information disclosure.

Affected products

• Lenovo Lecloud: before 7.0.25.99 (fixed in 7.0.25.99)

Published 2023-11-08. Last modified 2026-06-17.