CVE-2025-13154

6.8 mediumEPSS 0.1%

Medium (6.8). EPSS 0.1% chance of exploitation in the next 30 days.

An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.

Severity

CVSS 4.0

6.8 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2026-01-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://support.lenovo.com/us/en/product_security/LEN-208293

Check your stack JSON