Lenovo Commercial Vantage vulnerabilities

CVE-2025-6232 [HIGH] CWE-88 CVE-2025-6232: An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions co An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying specific registry locations.

CVE-2025-6231 [HIGH] CWE-88 CVE-2025-6231: An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions co An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying an application configuration file.

CVE-2026-15994 [HIGH] CWE-59 CVE-2026-15994: During an internal security assessment, an improper link following vulnerability was identified in L During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.

CVE-2025-6230 [MEDIUM] CWE-89 CVE-2025-6230: A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to mo A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands.