CVE-2026-89057
Medium
Description
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.
SeverityMedium
CVSS6.8
Exploit probability—
ProductIdea Tab Pro (TB373FU)
PublishedOct 16, 2026
First seenOct 16, 2026
Weakness typeCWE-288CWE-288
How to fix
Update
- Lenovo Idea Tab Pro (TB373FU)17.5.10.107 or later
- Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)17.5.10.348 or later
- Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354 or later
- Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)17.5.10.354 or later
- Lenovo Legion Tab (8.8", 3) (TB321FU)17.5.10.319 or later
- Lenovo Tab M11 (TB330FU)17.0.135 or later
- Lenovo Tab M11 (TB330FU/TB330XU)17.0.517 or later
- Lenovo Tab M11 (TB330XU)17.0.517 or later
- Lenovo Tab Extreme (TB570FU)17.5.589 or later
- Lenovo Tab Extreme (TB570ZU)17.5.589 or later
- Lenovo Tab Extreme (TB570ZU/TB570FU)17.5.589 or later
- Lenovo Tab K11 (TB330FUP)17.0.135 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo Idea Tab Pro (TB373FU) | v < 17.5.10.107 | 17.5.10.107 |
| Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) | v < 17.5.10.348 | 17.5.10.348 |
| Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) | v < TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354 | TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354 |
| Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU) | v < 17.5.10.354 | 17.5.10.354 |
| Lenovo Legion Tab (8.8", 3) (TB321FU) | v < 17.5.10.319 | 17.5.10.319 |
| Lenovo Tab M11 (TB330FU) | v < 17.0.135 | 17.0.135 |
| Lenovo Tab M11 (TB330FU/TB330XU) | v < 17.0.517 | 17.0.517 |
| Lenovo Tab M11 (TB330XU) | v < 17.0.517 | 17.0.517 |
| Lenovo Tab Extreme (TB570FU) | v < 17.5.589 | 17.5.589 |
| Lenovo Tab Extreme (TB570ZU) | v < 17.5.589 | 17.5.589 |
| Lenovo Tab Extreme (TB570ZU/TB570FU) | v < 17.5.589 | 17.5.589 |
| Lenovo Tab K11 (TB330FUP) | v < 17.0.135 | 17.0.135 |
| Lenovo Tab K11 (TB330XUP) | v < 17.0.157 | 17.0.157 |
| Lenovo Tab K11 Plus (TB352FU) | v < 17.0.10.344 | 17.0.10.344 |
| Lenovo Tab K11 Plus (TB352XU) | v < 17.0.10.336 | 17.0.10.336 |
| Lenovo Tab K11 Plus LTE ROW (TB352XU) | v < 17.0.10.336 | 17.0.10.336 |
| Lenovo Tab K11 Plus WIFI ROW: TB352FU | v < 17.0.10.344 | 17.0.10.344 |
| Lenovo Tab M10 5G (TB360ZU) | v < 16.0.939 | 16.0.939 |
| Lenovo Tab K9 (TB305FU) | v < 17.0.10.324 | 17.0.10.324 |
| Lenovo Tab K9 (TB305XU) | v < 17.0.10.318 | 17.0.10.318 |
| Lenovo Tab One (TB305FU) | v < 17.0.10.324 | 17.0.10.324 |
| Lenovo Tab One (TB305XU) | v < 17.0.10.254 | 17.0.10.254 |
| Lenovo Tab P12 (TB370FU) | v < 17.0.352 | 17.0.352 |
| Lenovo Tab P12 (TB370FU/TB372FU) | v < TB370FU：17.0.352, TB372FC：17.0.223 | TB370FU：17.0.352, TB372FC：17.0.223 |
| Lenovo Tab P12 (TB372FU) | v < 17.0.223 | 17.0.223 |
| Lenovo Tab Plus (TB351FU) | v < 17.5.10.199 | 17.5.10.199 |
| Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU) | v < 17.5.36.417 | 17.5.36.417 |
| Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU) | v < TB311FU：17.5.36.417 ,TB311XU：17.5.37.350 | TB311FU：17.5.36.417 ,TB311XU：17.5.37.350 |
| Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU) | v < 17.5.37.350 | 17.5.37.350 |
| Lenovo Yoga Tab (TB710FU) | v < 17.5.04.082 | 17.5.04.082 |
| Lenovo Yoga Tab Plus (TB520FU) | v < 17.5.10.362 | 17.5.10.362 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.