CVE-2026-65951

Name of the Vulnerable Software and Affected Versions Lenovo XClarity Essentials OneCLI version 5.5.0 for Linux

Description A path traversal issue exists in the TAR.GZ extraction logic. This flaw allows an attacker to write arbitrary files using the privileges of the OneCLI process if a user is convinced to process a specially crafted TAR.GZ update package. Path traversal, also known as Tar Slip, occurs when a program extracts files from an archive without properly validating the destination paths, potentially allowing files to be written outside the intended directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.