CVE-2025-13155CWE-276

CVE-2025-13155

High · published December 10, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

⚡ A local authenticated user can unleash chaos thanks to improper permissions in Lenovo Baiying Client! 🎉 Think of it like a hotel room where guests can access not just their own room but also the entire floor's amenities without any checks — a recipe for a wild party! 🎊 With this vulnerability, an attacker could execute code with elevated privileges, potentially gaining full control of the system. Imagine someone bypassing security to make changes or steal sensitive data — it's absolutely devastating!

Put simply

Think of it like a hotel room where guests can access not just their own room but also the entire floor's amenities without any checks — a recipe for a wild party! 🎊 This improper permissions vulnerability allows local authenticated users to run code with escalated privileges due to a flaw in the access control mechanisms of the Lenovo Baiying Client.

What to do

With this vulnerability, an attacker could execute code with elevated privileges, potentially gaining full control of the system. Imagine someone bypassing security to make changes or steal sensitive data — it's absolutely devastating! To mitigate this risk, update the Lenovo Baiying Client to the latest version as soon as it becomes available. Additionally, review user permissions and ensure that access controls are properly enforced to limit potential exploitation. You've got this! Stay vigilant and follow these steps to keep your systems secure. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00120 · 1.8th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-12-10T20:15Z
References (1)
EPSS history
Timeline
  • 10 DEC 14:08Z
    An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user to execute code with elevated…
    cvelistv5