Privileged Escalation via Improper Permissions in Lenovo App Store
CVE-2025-8485 Published on November 12, 2025
An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application.
Vulnerability Analysis
CVE-2025-8485 can be exploited with local system access. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
Products Associated with CVE-2025-8485
Want to know whenever a new CVE is published for Lenovo App Store? stack.watch will email you.
Affected Versions
Lenovo App Store:- Before 9.0.2530.1027 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.