{"id":"CVE-2026-92777","kind":"vulnerability","aliases":["CVE-2026-92777"],"related":[],"title":"Lenovo tablets: physical access lets a user bypass protections and run code","description":"A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.","summary":"Some Lenovo tablets have a flaw that lets a person with physical access to an unlocked tablet get around device protections. That lets them execute arbitrary code on the device.","severity":"medium","cvss":6.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["firmware","infrastructure","lenovo","tablet"],"not_affected_if":["device-locked","no-physical-access"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-16T00:17:07+00:00","first_seen_at":"2026-10-23T21:57:12+00:00","triaged_at":"2026-10-25T03:59:57+00:00","updated_at":"2026-10-25T03:59:57+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T03:59:57Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Lenovo tablets: physical access lets a user bypass protections and run code","impact":"high","summary":"Some Lenovo tablets have a flaw that lets a person with physical access to an unlocked tablet get around device protections. That lets them execute arbitrary code on the device.","category":"infrastructure","nicknames":[],"who_cares":["lenovo","tablet","firmware"],"confidence":0.5,"needs_auth":"yes","worst_case":"Attacker runs arbitrary code on an unlocked tablet with physical access","analyst_note":"Find the Lenovo advisory (PSIRT) listing affected tablet models and fixed firmware versions; the NVD entry alone does not name them.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["device-locked","no-physical-access"],"who_is_affected":"Owners of the affected Lenovo tablet models, where the device is left unlocked or reachable by someone with physical access. The sources do not list the affected models or firmware versions. Systems that are not Lenovo tablets are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000538,"input_tokens":3273,"output_tokens":422,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-92777':15A,18A 'access':4A,35B,69C 'allow':64C 'arbitrari':48B,80C 'around':41B 'bypass':8A,75C 'code':12A,49B,81C 'could':63C 'cve':13A,16A 'devic':42B,52B,76C 'execut':47B,79C 'firmwar':19B 'flaw':28B 'get':40B 'infrastructur':20B 'lenovo':1A,21B,24B,60C 'let':5A,30B,45B 'person':32B 'physic':3A,34B,68C 'potenti':54C 'protect':9A,43B,77C 'report':57C 'run':11A 'tablet':2A,22B,25B,39B,61C,73C 'unlock':38B,72C 'user':7A,66C 'vulner':55C","nicknames":[],"mitigations":[],"who_affected":"Owners of the affected Lenovo tablet models, where the device is left unlocked or reachable by someone with physical access. The sources do not list the affected models or firmware versions. Systems that are not Lenovo tablets are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-16T00:17:07+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@lenovo.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92777","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92777","severity":null,"published_at":"2026-10-16T00:17:07+00:00","modified_at":"2026-10-16T19:55:59+00:00","first_seen_at":"2026-10-23T21:57:12+00:00","fetched_at":"2026-10-23T22:28:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}