CVE-2026-92629: High severity Lenovo Baiying PC Client vulnerability

Published Oct 15, 2026

Updated

A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.

Affected Software

1 affected component

Lenovo Baiying PC Client

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade LenovoBaiyingCommercialAddin to a version that resolves this vulnerability.
Fixed in 1.1.0.295

Event History

Oct 15, 2026

CVE Published

via MITRE·11:17 PM

Data Sourced

via MITRE·11:17 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

The affected software is Lenovo Baiying PC Client, which is distributed exclusively in the Chinese market. Exploitation requires a local authenticated user, so systems without local user access are not exposed through this vulnerability alone.

What does an attacker need to exploit it?

An attacker needs authenticated local access and user interaction. The reported impact is execution of arbitrary code with elevated privileges.