CVE-2026-6511: Lenovo Smart Connect

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated user to access files owned by a different user on the same system.

Affected products

• Lenovo Smart Connect: before 09.0.2.003.000 (fixed in 09.0.2.003.000)

Published 2026-07-16. Last modified 2026-07-16.