Lenovo Baiying PC Client Improper Auth: Local User Can Escalate Privileges
CVE-2026-92629 Published on October 15, 2026
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.
Vulnerability Analysis
CVE-2026-92629 can be exploited with local system access. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
What is an AuthZ Vulnerability?
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVE-2026-92629 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2026-92629
Want to know whenever a new CVE is published for Lenovo Baiying Pc Client? stack.watch will email you.
Affected Versions
Lenovo Baiying PC Client:- Before 1.1.0.295 is affected.