CVE-2025-2503

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user.

Score

CVSS 3.1 7.1 High

Status

Analyzed - psirt@lenovo.com

Published

2025-05-30

Last modified

2025-08-21

Weaknesses

CWE-732

Affected products

• Pc Manager (Lenovo)
• Pcmanager (Lenovo)

References

• https://iknow.lenovo.com.cn/detail/428586