CVE-2026-77873 — System Update
HIGHCVE-2026-77873 is a high-severity (CVSS 7.3) Incorrect Default Permissions vulnerability in Lenovo System Update. Versions up to 5.08.03.59 are affected; the records list no fixed version yet, so check the vendor advisory below.
An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges.
Description
An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges.
Affected Products
System UpdateLenovoDetection & mitigation playbook
Vendor / applianceDetect
Inventory every Lenovo System Update deployment and check each version against the affected-products list above.
Remediation status
The records we use list no fixed version for CVE-2026-77873 (versions up to 5.08.03.59 are affected). Check the Lenovo System Update advisory for a patched release, and apply the workarounds below until you can upgrade.
Mitigate without a patch
Close the privilege gap rather than the entry point: audit which accounts, roles and service identities can reach the affected operation, drop the component to the least privilege it actually needs, and review file and directory permissions created by earlier installs — a default left in place is what makes this reachable. Alongside that, restrict the management interface to trusted networks and apply the vendor's recommended configuration mitigations.
Frequently Asked Questions
Is CVE-2026-77873 being exploited in your environment?
Detect and block the exploit chain at execution, on systems you cannot patch yet.