CVE-2026-92629
Received Received - Intake

Improper Authorization in Lenovo Baiying PC Client

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: Lenovo Group Ltd.

Description
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-92629
EUVD
EUVD-2026-102537

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Lenovo Baiying PC Client 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper authorization issue in Lenovo Baiying PC Client, which is only distributed in China. A local authenticated user could exploit it to run arbitrary code with higher privileges than intended.

Detection Guidance

This vulnerability is specific to Lenovo Baiying PC Client and requires local authenticated access. Detection primarily involves checking for the presence of the vulnerable software and verifying its version. No specific commands are provided in the context, but you should inspect installed applications and system processes for Lenovo Baiying PC Client.

Impact Analysis

If exploited, this flaw could allow an attacker with local access to gain elevated privileges on the system, potentially leading to unauthorized code execution or system control.

Compliance Impact

The vulnerability allows local authenticated users to execute arbitrary code with elevated privileges, which could lead to unauthorized access or data breaches. This may impact compliance with GDPR by risking unauthorized data processing or exposure, and with HIPAA by potentially compromising protected health information if exploited.

Mitigation Strategies

Update Lenovo Baiying PC Client to the latest version provided by Lenovo to address the improper authorization issue. Ensure only authorized users have local access and restrict administrative privileges to minimize risk.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-92629. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart