---
id: CVE-2026-89057
title: >-
  A potential authentication bypass vulnerability was reported in some Lenovo
  tablets that could allow a user with physical access to gain unauthorized
  device access.
summary: >-
  A potential authentication bypass vulnerability was reported in some Lenovo
  tablets that could allow a user with physical access to gain unauthorized
  device access.
severity: medium
cvss: 6.8
cvssVector: 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-288
vendor: Lenovo
product: Idea Tab Pro (TB373FU)
affected:
  - idea_tab_pro_tb373fu < 17.5.10.107
  - idea_tab_lenovo_tab_k11_gen_2_tb336fu < 17.5.10.348
  - >-
    idea_tab_lenovo_tab_k11_gen_2_tb336fu_tb336zu < TB336FU：17.5.10.348
    ,TB336ZU：17.5.10.354
  - idea_tab_lenovo_tab_k11_gen_2_tb336zu < 17.5.10.354
  - legion_tab_8.8_3_tb321fu < 17.5.10.319
  - tab_m11_tb330fu < 17.0.135
  - tab_m11_tb330fu_tb330xu < 17.0.517
  - tab_m11_tb330xu < 17.0.517
  - tab_extreme_tb570fu < 17.5.589
  - tab_extreme_tb570zu < 17.5.589
  - tab_extreme_tb570zu_tb570fu < 17.5.589
  - tab_k11_tb330fup < 17.0.135
  - tab_k11_tb330xup < 17.0.157
  - tab_k11_plus_tb352fu < 17.0.10.344
  - tab_k11_plus_tb352xu < 17.0.10.336
  - tab_k11_plus_lte_row_tb352xu < 17.0.10.336
  - tab_k11_plus_wifi_row_tb352fu < 17.0.10.344
  - tab_m10_5g_tb360zu < 16.0.939
  - tab_k9_tb305fu < 17.0.10.324
  - tab_k9_tb305xu < 17.0.10.318
  - tab_one_tb305fu < 17.0.10.324
  - tab_one_tb305xu < 17.0.10.254
  - tab_p12_tb370fu < 17.0.352
  - 'tab_p12_tb370fu_tb372fu < TB370FU：17.0.352, TB372FC：17.0.223'
  - tab_p12_tb372fu < 17.0.223
  - tab_plus_tb351fu < 17.5.10.199
  - tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu < 17.5.36.417
  - >-
    tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu_tb311xu <
    TB311FU：17.5.36.417 ,TB311XU：17.5.37.350
  - tab_with_clear_case_lenovo_tab_with_folio_case_tb311xu < 17.5.37.350
  - yoga_tab_tb710fu < 17.5.04.082
  - yoga_tab_plus_tb520fu < 17.5.10.362
published: '2026-10-16'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T19:55:59.740'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89057'
references:
  - url: 'https://support.lenovo.com/us/en/product_security/LEN-218699'
    label: psirt@lenovo.com
tags:
  - nvd
  - cve.org
epss: 0.00195
epssPercentile: 0.0907
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T18:57:50.385384Z'
ingestedAt: '2026-10-15T23:54:16.913Z'
---

## Overview

A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.