A vulnerability was reported in the Lenovo LeCloud client application that, under certain conditions, could allow information disclosure.

Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file downloads, which could result in information disclosure.