PT-2026-60520 · Lenovo · Smart Connect

CVE-2026-6511 · Published 2026-07-16 · Updated 2026-07-16

Mitre

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

During an internal security assessment, a potential improper access control vulnerability was discovered in Lenovo Smart Connect for Windows that could allow a local authenticated user to access files owned by a different user on the same system.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-6511

Affected Products

Smart Connect

References · 3

• https://support.lenovo.com/us/en/product_security/LEN-218281 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-6511 · Security Note
• https://lenovo.com/us/en/software/smart-connect · Note