CVE-2026-1717

MEDIUM 5.5

CVSS Score

5.5

EPSS Score

0.0%

EPSS Percentile

0th

An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to terminate arbitrary processes with elevated privileges.

CWE	CWE-88
Vendor	lenovo
Product	vantage
Published	Mar 11, 2026
Last Updated	Mar 12, 2026

Stay Ahead of the Next One

Get instant alerts for lenovo vantage

Be the first to know when new medium vulnerabilities affecting lenovo vantage are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

Lenovo / Vantage

0 < 1.0.0.138

Lenovo / Baiying

0 < 1.0.0.138

References

NVD ↗ CVE.org ↗ EPSS Data ↗

support.lenovo.com: https://support.lenovo.com/us/en/product_security/LEN-213044 iknow.lenovo.com.cn: https://iknow.lenovo.com.cn/detail/438815

Credits

Lenovo thanks Manuel Kiesel (cyllective AG) for reporting this issue.