CVE-2025-13155: High severity Lenovo Baiying Client vulnerability

Published Dec 10, 2025

Updated

An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user to execute code with elevated privileges.

Affected Software

1 affected component

Lenovo Baiying Client

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Lenovo Baiying Client to a version that resolves this vulnerability.
Fixed in 4.1.0

Event History

Dec 10, 2025

CVE Published

via MITRE·02:08 PM

Data Sourced

via MITRE·02:08 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-13155?

CVE-2025-13155 is classified as a high severity vulnerability due to its potential to allow local authenticated users to execute code with elevated privileges.

How do I fix CVE-2025-13155?

To fix CVE-2025-13155, ensure that you update the Lenovo Baiying Client to the latest patched version provided by Lenovo.

Who is affected by CVE-2025-13155?

CVE-2025-13155 affects users of the Lenovo Baiying Client who have local authenticated access to the system.

Can CVE-2025-13155 be exploited remotely?

CVE-2025-13155 cannot be exploited remotely as it requires local authenticated user access.

What systems are vulnerable to CVE-2025-13155?

Systems running the affected versions of Lenovo Baiying Client are vulnerable to CVE-2025-13155.