{"id":"CVE-2026-65950","kind":"vulnerability","aliases":["CVE-2026-65950"],"related":[],"title":"Lenovo XClarity OneCLI: crafted ZIP update package writes arbitrary files","description":"A path traversal vulnerability in the ZIP extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could allow an attacker to write arbitrary files with the privileges of the OneCLI process by convincing a user to process a specially crafted ZIP-based update package.","summary":"Lenovo XClarity Essentials OneCLI 5.5.0 for Linux has a path traversal flaw in its ZIP extraction logic. A user who is tricked into processing a specially crafted ZIP-based update package lets an attacker write arbitrary files with the privileges of the OneCLI process.","severity":"medium","cvss":5.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Lenovo XClarity Essentials OneCLI","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["lenovo","linux","server-management","vendor","xclarity-essentials-onecli"],"not_affected_if":["other-platforms","untrusted-packages-never-processed"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-11T22:17:27+00:00","first_seen_at":"2026-11-11T22:29:34+00:00","triaged_at":"2026-11-11T22:34:05+00:00","updated_at":"2026-11-11T22:34:05+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-11T22:34:05Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Lenovo XClarity OneCLI: crafted ZIP update package writes arbitrary files","impact":"high","summary":"Lenovo XClarity Essentials OneCLI 5.5.0 for Linux has a path traversal flaw in its ZIP extraction logic. A user who is tricked into processing a specially crafted ZIP-based update package lets an attacker write arbitrary files with the privileges of the OneCLI process.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["lenovo","xclarity-essentials-onecli","linux","server-management"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"attacker writes arbitrary files with OneCLI process privileges","analyst_note":"Find the Lenovo PSIRT advisory and the fixed OneCLI version, and confirm whether other platforms are affected.","how_to_check":"- unknown","plain_action":"","product_name":"Lenovo XClarity Essentials OneCLI","needs_analyst":true,"not_affected_if":["other-platforms","untrusted-packages-never-processed"],"who_is_affected":"Affects Lenovo XClarity Essentials OneCLI 5.5.0 on Linux, a server management tool that administrators run against their machines. Exposure depends on whether a user processes an untrusted ZIP-based update package with it. The sources do not say which other OneCLI versions or platforms are affected.","user_interaction":"yes","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000741,"input_tokens":4570,"output_tokens":569,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-65950':13A,16A '5.5.0':35B,90C 'allow':94C 'arbitrari':9A,67B,99C 'attack':65B,96C 'base':60B,119C 'convinc':109C 'could':93C 'craft':4A,57B,116C 'cve':11A,14A 'essenti':29B,33B,88C 'essentials':19A 'extract':46B,83C 'file':10A,68B,100C 'flaw':42B 'lenovo':1A,17A,21B,31B,86C 'let':63B 'linux':22B,37B,92C 'logic':47B,84C 'manag':25B 'onec':3A,30B,34B,74B,89C,106C 'onecli':20A 'packag':7A,62B,121C 'path':40B,77C 'privileg':71B,103C 'process':54B,75B,107C,113C 'server':24B 'server-manag':23B 'special':56B,115C 'travers':41B,78C 'trick':52B 'updat':6A,61B,120C 'user':49B,111C 'vendor':26B 'vulner':79C 'write':8A,66B,98C 'xclariti':2A,28B,32B,87C 'xclarity':18A 'xclarity-essentials-onec':27B 'zip':5A,45B,59B,82C,118C 'zip-bas':58B,117C","nicknames":[],"mitigations":[],"who_affected":"Affects Lenovo XClarity Essentials OneCLI 5.5.0 on Linux, a server management tool that administrators run against their machines. Exposure depends on whether a user processes an untrusted ZIP-based update package with it. The sources do not say which other OneCLI versions or platforms are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["lenovoxclarityessentialsonecli","xclarityessentialsonecli"],"ptokens":["essentials","lenovo","onecli","xclarity"],"labels":["lenovo","linux","medium","servermanagement","vendor","xclarityessentialsonecli"],"campaign_type":null,"search_a":"'-2026':12A,15A '-65950':13A,16A 'arbitrari':9A 'craft':4A 'cve':11A,14A 'essentials':19A 'file':10A 'lenovo':1A,17A 'onec':3A 'onecli':20A 'packag':7A 'updat':6A 'write':8A 'xclariti':2A 'xclarity':18A 'zip':5A","search_b":"'5.5.0':35B 'arbitrari':67B 'attack':65B 'base':60B 'craft':57B 'essenti':29B,33B 'extract':46B 'file':68B 'flaw':42B 'lenovo':21B,31B 'let':63B 'linux':22B,37B 'logic':47B 'manag':25B 'onec':30B,34B,74B 'packag':62B 'path':40B 'privileg':71B 'process':54B,75B 'server':24B 'server-manag':23B 'special':56B 'travers':41B 'trick':52B 'updat':61B 'user':49B 'vendor':26B 'write':66B 'xclariti':28B,32B 'xclarity-essentials-onec':27B 'zip':45B,59B 'zip-bas':58B","search_c":"'5.5.0':90C 'allow':94C 'arbitrari':99C 'attack':96C 'base':119C 'convinc':109C 'could':93C 'craft':116C 'essenti':88C 'extract':83C 'file':100C 'lenovo':86C 'linux':92C 'logic':84C 'onec':89C,106C 'packag':121C 'path':77C 'privileg':103C 'process':107C,113C 'special':115C 'travers':78C 'updat':120C 'user':111C 'vulner':79C 'write':98C 'xclariti':87C 'zip':82C,118C 'zip-bas':117C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T22:17:27+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@lenovo.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-65950","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65950","severity":null,"published_at":"2026-11-11T22:17:27+00:00","modified_at":"2026-11-11T22:17:27+00:00","first_seen_at":"2026-11-11T22:29:34+00:00","fetched_at":"2026-11-11T22:29:34+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}