Untrusted Search Path Vulnerability in Lenovo PC Manager

CVE-2025-2501

What is CVE-2025-2501?

Lenovo PC Manager is affected by an untrusted search path vulnerability that allows local attackers to potentially elevate their privileges. By exploiting this flaw, unauthorized users could manipulate the way the application locates its executable files, leading to the execution of malicious code in a higher privilege context. It is crucial for users to stay informed about updates and patches to mitigate potential risks associated with this vulnerability.

References