CVE-2026-4134: High severity Lenovo Lenovo Software Fix vulnerability

Published Apr 15, 2026

Updated

During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute code with elevated privileges.

Affected Software

1 affected component

Lenovo Lenovo Software Fix

Remediation

Information

Update Lenovo Software Fix to version 7.5.5.19 or later.

Event History

Apr 15, 2026

CVE Published

via MITRE·12:28 PM

Data Sourced

via MITRE·12:28 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:16 PM

DescriptionSeverityWeakness

Sep 10, 58257

Event

via NVD·11:39 AM

Frequently Asked Questions

What is the severity of CVE-2026-4134?

CVE-2026-4134 is considered a high severity vulnerability due to the potential for local authenticated users to execute code with elevated privileges.

How do I fix CVE-2026-4134?

To fix CVE-2026-4134, ensure that you update to the latest version of Lenovo Software Fix that addresses this vulnerability.

Who is affected by CVE-2026-4134?

CVE-2026-4134 affects local authenticated users of Lenovo Software Fix who may exploit this vulnerability.

What type of vulnerability is represented by CVE-2026-4134?

CVE-2026-4134 is a privilege escalation vulnerability that allows code execution by a local authenticated user.

When was CVE-2026-4134 discovered?

CVE-2026-4134 was discovered during an internal security assessment conducted by Lenovo.