DLL Hijacking Vulnerability in Lenovo One Client

CVE-2025-13152

What is CVE-2025-13152?

A DLL hijacking vulnerability has been identified in Lenovo One Client. This flaw allows a local authenticated user to potentially execute arbitrary code with elevated privileges by manipulating the way the application loads dynamic link libraries. If exploited, this could lead to unauthorized actions on the affected system, representing a significant security concern for users and organizations relying on the software.

References