Lenovo PC Manager is vulnerable to a DLL hijacking flaw that could allow a local authenticated user to escalate privileges and execute arbitrary code.

The application is susceptible to an uncontrolled search path element (CWE-427), which allows a local authenticated user to perform DLL hijacking. By placing a malicious DLL in a searchable path, an attacker can achieve code execution with the privileges of the application process.

Successful exploitation of this vulnerability permits a local user to gain elevated privileges on the host system. Given the CVSS score of 7.8, this represents a high-severity risk to system integrity and security, potentially allowing an attacker to bypass local access controls, install persistent backdoors, or compromise sensitive data stored on the affected workstation.

Immediate Action: Update the Lenovo PC Manager software to version 5.1.140.9262 or later to resolve the search path vulnerability.

Proactive Monitoring: Monitor system logs for unexpected file creation events or unauthorized DLL loading patterns within the application directory.

Compensating Controls: Restrict local user permissions to prevent unauthorized file placement in application directories and enforce application whitelisting where possible.

Public Exploit Available: No (exploit_available: false)

Organizations should prioritize the deployment of the vendor-supplied update to all Lenovo endpoints running the affected version of PC Manager. Because this flaw requires local authentication, restricting user access rights and auditing local file modifications are essential steps to reduce the attack surface until the patch is successfully applied.