---
id: "CVE-2026-89061"
page: "https://infrastack.ai/live/CVE-2026-89061"
kind: "vulnerability"
aliases: ["CVE-2026-89061"]
title: "Lenovo PC Manager: local users can escalate privileges on Windows"
severity: "high"
cvss: 8.5
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["lenovo", "pc-manager", "vendor", "windows"]
not_affected_if: ["not-chinese-market-distribution"]
published_at: "2026-11-11T17:17:23+00:00"
first_seen_at: "2026-11-11T17:28:22+00:00"
updated_at: "2026-11-11T17:30:21+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89061", "first_seen_at": "2026-11-11T17:28:22+00:00"}, {"source": "analyst", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89061", "first_seen_at": "2026-11-11T17:30:21+00:00", "cites": ["https://nvd.nist.gov/vuln/detail/CVE-2026-89061"]}]
exploit_sources: []
---

# Lenovo PC Manager: local users can escalate privileges on Windows

Link for people: https://infrastack.ai/live/CVE-2026-89061 (this .md is for agents)

Lenovo PC Manager, a utility sold only in the Chinese market, has a flaw found in an internal assessment. A local user could use it to gain higher privileges on the machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Check whether Lenovo PC Manager (联想电脑管家) is installed on Windows and note its version (in the app's About page). Lenovo has not yet published affected versions for this CVE; watch Lenovo PSIRT and iknow.lenovo.com.cn for the bulletin.

## Timeline

- 2026-11-11T17:28:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-89061
- 2026-11-11T17:30:21+00:00 analyst https://nvd.nist.gov/vuln/detail/CVE-2026-89061 — Published minutes ago; Lenovo bulletin (iknow.lenovo.com.cn / PSIRT) not yet found. Only NVD/CNA text exists: no affected range, no fixed version. Prior PC Manager advisories fixed in 5.1.x builds but that is not this CVE. Latest release per guanjia.lenovo.com.cn is 5.1.210.10222 (2026-10-22), not stated as a fix. Revisit when LEN bulletin appears.

## Documents

- [describes] NVD: CVE-2026-89061 https://nvd.nist.gov/vuln/detail/CVE-2026-89061

## From the sources

During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager, distributed exclusively in the Chinese market, that could allow a local user to escalate privileges.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_