CVE-2025-6249: Lenovo Filez Client

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

An authentication bypass vulnerability was reported in FileZ client application that could allow a local attacker with elevated permissions access to application data.

Affected products

• Lenovo Filez Client: before 11.1.0.14 (fixed in 11.1.0.14)

Published 2025-07-17. Last modified 2026-06-17.