Local Privilege Escalation Vulnerability in Lenovo PC Manager
CVE-2026-89061

8.5HIGH

Key Information:

Vendor

Lenovo
Status
Pc Manager
Vendor
CVE Published:
11 November 2026

What is CVE-2026-89061?

A potential local privilege escalation vulnerability has been identified in Lenovo PC Manager, a product available exclusively in the Chinese market. This vulnerability could allow a local user to gain elevated privileges on the affected system, creating security risks for users. It is crucial for users of Lenovo PC Manager to be aware of this issue and to implement any necessary mitigations as advised by Lenovo.

Affected Version(s)

PC Manager 0 < 5.1.210

References

https://iknow.lenovo.com.cn/detail/443044
vendor-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks Zhai Weihua (翟卫华) for subsequently reporting this vulnerability.
.