This vulnerability involves improper link resolution before file access in Lenovo Dock Manager, enabling an authenticated local user to perform arbitrary file deletion with elevated privileges. The flaw is categorized under CWE-59 (Improper Link Resolution Before File Access, also known as 'Link Following'). The CVSS 4.0 base score is 6.9, reflecting local attack vector, low attack complexity, no user interaction, and high impact on integrity and availability. No known exploits are reported in the wild, and no patch or remediation level has been disclosed by Lenovo as of the publication date.

An authenticated local user could exploit this vulnerability to delete arbitrary files with elevated privileges, potentially disrupting system operations or deleting critical files. The impact affects system integrity and availability but does not affect confidentiality. There is no indication of remote exploitation or requirement for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit local user access to trusted individuals and monitor for suspicious activity related to file deletions. Follow Lenovo's official communications for updates on patches or mitigations.