CVE-2025-8421
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges.
Risk Assessment
A local user can write or redirect log files with elevated privileges, potentially leading to privilege escalation or log manipulation. This may compromise system integrity.
Recommendation
Update Lenovo Dock Manager to a patched version. Verify and correct log directory permissions after installation.
Other vulnerabilities in Lenovo Dock Manager
See all- CVE-2026-63426High
During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.
- CVE-2026-63425High
During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges.
- CVE-2026-63424High
During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.
Original NVD description (English source)
An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS