Baiying PC Client - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/baiying-pc-client/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 16 Oct 2026 00:41:28 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgImproper Authorization in Lenovo Baiying PC Clienthttps://feed.craftedsignal.io/briefs/2026-10-lenovo-baiying-privilege-escalation/Fri, 16 Oct 2026 00:41:28 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-lenovo-baiying-privilege-escalation/A local improper authorization vulnerability in Lenovo Baiying PC Client allows an authenticated user to achieve privilege escalation through arbitrary code execution.A vulnerability identified as CVE-2026-92629 exists in the Lenovo Baiying PC Client, a software package distributed specifically within the Chinese market. The vulnerability is classified as an improper authorization flaw. It allows a local, authenticated user to interact with the application in a manner that bypasses existing access controls, leading to the execution of arbitrary code with elevated system privileges. This escalation of privilege significantly impacts the security posture of the host machine, as the attacker can perform operations reserved for administrative accounts. Given the local nature of the attack, this vulnerability is particularly relevant in multi-user environments or scenarios where non-privileged users have access to corporate workstations where this client is installed.

Impact

Successful exploitation allows a local user to execute arbitrary code with elevated privileges, potentially leading to full system compromise. This represents a high risk in enterprise environments where users are not restricted from executing local applications or where shared workstations are deployed. The scope of impact is limited to the subset of Lenovo devices in the Chinese market running the vulnerable client software.

Recommendation

Identify all endpoints running Lenovo Baiying PC Client within your environment and restrict local user access to the binary until an official vendor patch is applied.

]]>highadvisoryprivilege-escalationwindowslocal-exploitation