During an internal security assessment, Lenovo identified a vulnerability in Dock Manager involving weak encoding of a password or key. This flaw could enable a local authenticated user to escalate privileges on the affected system. The CVSS 4.0 score is 7.0, reflecting a high impact with local attack vector, low attack complexity, no user interaction required, and significant impact on confidentiality and integrity. No official remediation or patch has been disclosed yet.

A local authenticated user could exploit the weak encoding of a password to escalate privileges, potentially gaining higher-level access than intended. This could compromise system integrity and confidentiality within the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local user access to trusted individuals and monitor for suspicious privilege escalation attempts.