Lenovo Vantage Privilege Escalation Vulnerability

A vulnerability allowing privilege escalation has been identified in Lenovo Vantage. Under certain conditions, a local attacker could execute code with elevated permissions by modifying specific registry locations. This issue affects several versions of Lenovo Vantage.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with elevated privileges, potentially allowing a local attacker to manipulate system settings or applications more freely.

Remediation

Users are advised to update Lenovo Vantage to version 10.2501.20.0 or newer. Lenovo Commercial Vantage users should update to version 20.2506.39.0 or newer.