CVE-2026-9045: During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges

Synopsis

A local privilege escalation vulnerability affects Lenovo Accessories and Display Manager for Enterprise for Windows. An attacker with a low-privilege local account can exploit this flaw without any network access or victim interaction to execute arbitrary code with elevated privileges on the host. A patched-image rebuild at version 1.0.9 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host; no network path to the target is required.

• AuthenticationRequired

  Any low-privilege local account is sufficient to attempt exploitation; no administrative credentials are needed.

• Victim interactionNot required

  The exploit completes without requiring any action from another user on the system.

• Attack complexityDetail

  The exploit is reliable and condition-free; no race conditions, specific memory layouts, or environmental factors need to be in place.

Blast Radius

• A successful attacker executes arbitrary code with elevated privileges on the affected Windows host.
• The attacker gains full read access to confidential data stored on the system, including files and credentials accessible at elevated privilege levels.
• The attacker can modify or delete files, configurations, and other persisted data on the host.
• The attacker can crash or disrupt services running on the affected machine.