Live › vulnerability › CVE-2026-92629
Go to dashboardLenovo Baiying PC Client, sold only in the Chinese market, has an improper authorization flaw. A local user with an account can run arbitrary code with elevated privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Only Windows PCs running the Lenovo Baiying PC Client (sold only in the Chinese market) with the LenovoBaiyingCommercialAddin component below 1.1.0.295. An attacker needs a local, authenticated account and some user interaction, and can then run code with elevated privileges. Shared or multi-user machines matter most; anyone without Baiying installed can skip this.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Lenovo Baiying PC Client (LenovoBaiyingCommercialAddin) | vendor | < 1.1.0.295 | 1.1.0.295 |
1.1.0.295 are affected1.1.0.295 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-92629")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.