ExploitPublished 21 May 2026

https://support.lenovo.com/es/es/solutions/legion_space · Lenovo LegionSpace 1.7.11.2 · 'DAService' Unquoted Service Path

Affects https://support.lenovo.com/es/es/solutions/legion_spaceSource Exploit-DB RSS Feed

Severity

Medium

Rated by Threat Radar

Data as of 18 Jun 2026, 21:48 UTC

What to do

Affected software

Product	Affected	Fixed in
https://support.lenovo.com/es/es/solutions/legion_space	Affected =1.7.11.2	Fixed in–

AI-suggested

Upgrade Lenovo LegionSpace to version 1.8.12.13 or later, as provided by the vendor. This official fix addresses the unquoted service path vulnerability. No other mitigation actions are indicated by the vendor advisory.

Description

Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path

Impact

A local attacker with the ability to write to certain directories in the file system could exploit this vulnerability to execute arbitrary code with the elevated privileges of the DAService, which runs as LocalSystem. This could result in full system compromise under the context of the highest privilege level on the affected machine. Exploitation requires local access and the ability to place malicious executables in specific path locations.

Indicators of compromise

Exploit source code

Exploit code for Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path1,720 characters

# Exploit Title: Lenovo LegionSpace 1.7.11.2 - 'DAService' Unquoted Service Path
# Exploit Author: CENACIF-MX
# Discovery Date: 2025-12-04
# Vendor Homepage: https://support.lenovo.com/es/es/solutions/legion_space
# Tested Version: 1.7.11.2
# Vulnerability Type: Unquoted Service Path
# Tested on OS: Microsoft Windows 11 Enterprise x64 es
# Fix: Upgrade to Lenovo LegionSpace 1.8.12.13 or later
# CVE : N/A
# Disclosure Timeline
# | Date | Event |
# |------|-------|
# | 2025-12-04 | Vulnerability d…

References

exploit-db.com/exploits/52570 (opens in a new tab)

Community reviews

Loading reviews…