CVE-2026-16791: Lenovo Xclarity Essentials Onecli

Low severity, CVSS 3.9. EPSS: 0.1% chance of exploitation in the next 30 days.

A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileged attacker to overwrite or truncate arbitrary local files with program-generated data when OneCLI is executed with elevated privileges.

Affected products

• Lenovo Xclarity Essentials Onecli: before 5.6 (fixed in 5.6)

Published 2026-08-04. Last modified 2026-08-24.