Read the docs
TI-2025-00754 Aliases CVE-2025-0886GHSA-4599-7962-c7jc

Incorrect default permissions in Lenovo Elliptic Virtual Lock Sensor Service For ThinkPad…

Priority LOW 38CWE-276Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00198 9th percentileScored 2026-11-07
Fix Fixed Elliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW) (Lenovo): 1000.100.108.548Elliptic Human Presence Detection Driver for ThinkPad P1 Gen 7 (Type 21KV, 21KW) (Lenovo): 1000.100.108.801+31 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
LenovoElliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW)before 1000.100.108.5481000.100.108.548Patch availableCNA
LenovoElliptic Human Presence Detection Driver for ThinkPad P1 Gen 7 (Type 21KV, 21KW)before 1000.100.108.8011000.100.108.801Patch availableCNA
LenovoElliptic Virtual Lock Sensor Service for P14s Gen 4 (Type 21HF, 21HG)before 1000.100.108.8581000.100.108.858Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 4 (Type 21K5, 21K6)before 1000.100.108.18931000.100.108.1893Patch availableCNA
LenovoElliptic Human Presence Detection Driver for ThinkPad P14s Gen 5 (Type 21G2, 21G3)before 1000.100.108.8011000.100.108.801Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 5 (Type 21ME, 21MF)before 1000.100.108.61361000.100.108.6136Patch availableCNA
LenovoElliptic Human Presence detection Device Driver for ThinkPad P16 Gen 2 (Type 21FA, 21FB)before 1000.100.108.7741000.100.108.774Patch availableCNA
LenovoElliptic Virtual Lock Sensor Service for P16s Gen 2 (Type 21HK, 21HL)before 1000.100.108.8581000.100.108.858Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for ThinkPad P16s Gen 2 (Type 21K9, 21KA)before 1000.100.106.23911000.100.106.2391Patch availableCNA
Lenovolliptic Human Presence Detection Driver for P16s Gen 3 (Type 21KS, 21KT)before 1000.100.108.8011000.100.108.801Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 1 (Type 21FC, 21FD)before 1000.100.108.9001000.100.108.900Patch availableCNA
LenovoElliptic Human Presence Detection Driver for ThinkPad P16v Gen 1 (Type 21FE, 21FF)before 1000.100.108.22351000.100.108.2235Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 2 (Type 21KX, 21KY)before 1000.100.108.8011000.100.108.801Patch availableCNA
LenovoElliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21AH, 21AJ)before 3.2.61209.53.2.61209.5Patch availableCNA
LenovoElliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21CF, 21CG))before 3.2.61209.53.2.61209.5Patch availableCNA
LenovoElliptic Virtual Lock Sensor Service for T14 Gen 4 (Type 21HD, 21HE)before 1000.100.108.8581000.100.108.858Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for T14 Gen 4 (Type 21K3, 21K4)before 1000.100.108.18931000.100.108.1893Patch availableCNA
Lenovolliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21MC, 21MD)before 1000.100.108.61361000.100.108.6136Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21ML, 21MM)before 1000.100.108.8011000.100.108.801Patch availableCNA
LenovoElliptic Virtual Lock Sensor Service for T14s Gen 4 (Type 21F6, 21F7)before 1000.100.108.8581000.100.108.858Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for ThinkPad T14s Gen 4 (Type 21F8, 21F9)before 1000.100.108.18931000.100.108.1893Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for T14s Gen 5 (Type 21LS, 21LT)before 1000.100.108.8011000.100.108.801Patch availableCNA
LenovoElliptic Human Presence Detection driver for ThinkPad T14s Gen 6 (Type 21M1, 21M2)before 1000.100.109.821000.100.109.82Patch availableCNA
LenovoElliptic Virtual Lock Sensor Service for T16 Gen 2 (Type 21HH, 21HJ)before 1000.100.108.8581000.100.108.858Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for T16 Gen 2 (Type 21K7 21K8)before 1000.100.106.23911000.100.106.2391Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for T16 Gen 3 (Type 21MN, 21MQ)before 1000.100.108.8011000.100.108.801Patch availableCNA
LenovoElliptic Virtual Lock Sensor Service for X1 2-in-1 Gen 9 (Type 21KE, 21KF)before 1000.100.108.8011000.100.108.801Patch availableCNA
LenovoElliptic Virtual Lock Sensor Service for ThinkPad X1 Carbon 12th Gen (Type 21KC, 21KD)before 1000.100.108.8011000.100.108.801Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for X13 2-in-1 Gen 5 (Type 21LW, 21LX)before 1000.100.108.8011000.100.108.801Patch availableCNA
LenovoElliptic Virtual Lock Sensor for ThinkPad X13 Gen 4 (Type 21EX, 21EY)before 1000.100.108.7611000.100.108.761Patch availableCNA
LenovoElliptic Human Presence Detection Driver for ThinkPad X13 Gen 4 (Type 21J3, 21J4)before 1000.100.108.22341000.100.108.2234Patch availableCNA
LenovoElliptic Human Presence Detection Device Driver for X13 Gen 5 (Type 21LU, 21LV)before 1000.100.108.8011000.100.108.801Patch availableCNA
LenovoElliptic Virtual Lock Sensor for X13 Yoga Gen 4 (Type 21F2, 21F3)before 1000.100.108.7611000.100.108.761Patch availableCNA
  • Elliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW) VendorLenovo Affected before 1000.100.108.548 Fixed in 1000.100.108.548 Patch available CNA
  • Elliptic Human Presence Detection Driver for ThinkPad P1 Gen 7 (Type 21KV, 21KW) VendorLenovo Affected before 1000.100.108.801 Fixed in 1000.100.108.801 Patch available CNA
  • Elliptic Virtual Lock Sensor Service for P14s Gen 4 (Type 21HF, 21HG) VendorLenovo Affected before 1000.100.108.858 Fixed in 1000.100.108.858 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 4 (Type 21K5, 21K6) VendorLenovo Affected before 1000.100.108.1893 Fixed in 1000.100.108.1893 Patch available CNA
  • Elliptic Human Presence Detection Driver for ThinkPad P14s Gen 5 (Type 21G2, 21G3) VendorLenovo Affected before 1000.100.108.801 Fixed in 1000.100.108.801 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 5 (Type 21ME, 21MF) VendorLenovo Affected before 1000.100.108.6136 Fixed in 1000.100.108.6136 Patch available CNA
  • Elliptic Human Presence detection Device Driver for ThinkPad P16 Gen 2 (Type 21FA, 21FB) VendorLenovo Affected before 1000.100.108.774 Fixed in 1000.100.108.774 Patch available CNA
  • Elliptic Virtual Lock Sensor Service for P16s Gen 2 (Type 21HK, 21HL) VendorLenovo Affected before 1000.100.108.858 Fixed in 1000.100.108.858 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for ThinkPad P16s Gen 2 (Type 21K9, 21KA) VendorLenovo Affected before 1000.100.106.2391 Fixed in 1000.100.106.2391 Patch available CNA
  • lliptic Human Presence Detection Driver for P16s Gen 3 (Type 21KS, 21KT) VendorLenovo Affected before 1000.100.108.801 Fixed in 1000.100.108.801 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 1 (Type 21FC, 21FD) VendorLenovo Affected before 1000.100.108.900 Fixed in 1000.100.108.900 Patch available CNA
  • Elliptic Human Presence Detection Driver for ThinkPad P16v Gen 1 (Type 21FE, 21FF) VendorLenovo Affected before 1000.100.108.2235 Fixed in 1000.100.108.2235 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 2 (Type 21KX, 21KY) VendorLenovo Affected before 1000.100.108.801 Fixed in 1000.100.108.801 Patch available CNA
  • Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21AH, 21AJ) VendorLenovo Affected before 3.2.61209.5 Fixed in 3.2.61209.5 Patch available CNA
  • Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21CF, 21CG)) VendorLenovo Affected before 3.2.61209.5 Fixed in 3.2.61209.5 Patch available CNA
  • Elliptic Virtual Lock Sensor Service for T14 Gen 4 (Type 21HD, 21HE) VendorLenovo Affected before 1000.100.108.858 Fixed in 1000.100.108.858 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for T14 Gen 4 (Type 21K3, 21K4) VendorLenovo Affected before 1000.100.108.1893 Fixed in 1000.100.108.1893 Patch available CNA
  • lliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21MC, 21MD) VendorLenovo Affected before 1000.100.108.6136 Fixed in 1000.100.108.6136 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21ML, 21MM) VendorLenovo Affected before 1000.100.108.801 Fixed in 1000.100.108.801 Patch available CNA
  • Elliptic Virtual Lock Sensor Service for T14s Gen 4 (Type 21F6, 21F7) VendorLenovo Affected before 1000.100.108.858 Fixed in 1000.100.108.858 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for ThinkPad T14s Gen 4 (Type 21F8, 21F9) VendorLenovo Affected before 1000.100.108.1893 Fixed in 1000.100.108.1893 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for T14s Gen 5 (Type 21LS, 21LT) VendorLenovo Affected before 1000.100.108.801 Fixed in 1000.100.108.801 Patch available CNA
  • Elliptic Human Presence Detection driver for ThinkPad T14s Gen 6 (Type 21M1, 21M2) VendorLenovo Affected before 1000.100.109.82 Fixed in 1000.100.109.82 Patch available CNA
  • Elliptic Virtual Lock Sensor Service for T16 Gen 2 (Type 21HH, 21HJ) VendorLenovo Affected before 1000.100.108.858 Fixed in 1000.100.108.858 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for T16 Gen 2 (Type 21K7 21K8) VendorLenovo Affected before 1000.100.106.2391 Fixed in 1000.100.106.2391 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for T16 Gen 3 (Type 21MN, 21MQ) VendorLenovo Affected before 1000.100.108.801 Fixed in 1000.100.108.801 Patch available CNA
  • Elliptic Virtual Lock Sensor Service for X1 2-in-1 Gen 9 (Type 21KE, 21KF) VendorLenovo Affected before 1000.100.108.801 Fixed in 1000.100.108.801 Patch available CNA
  • Elliptic Virtual Lock Sensor Service for ThinkPad X1 Carbon 12th Gen (Type 21KC, 21KD) VendorLenovo Affected before 1000.100.108.801 Fixed in 1000.100.108.801 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for X13 2-in-1 Gen 5 (Type 21LW, 21LX) VendorLenovo Affected before 1000.100.108.801 Fixed in 1000.100.108.801 Patch available CNA
  • Elliptic Virtual Lock Sensor for ThinkPad X13 Gen 4 (Type 21EX, 21EY) VendorLenovo Affected before 1000.100.108.761 Fixed in 1000.100.108.761 Patch available CNA
  • Elliptic Human Presence Detection Driver for ThinkPad X13 Gen 4 (Type 21J3, 21J4) VendorLenovo Affected before 1000.100.108.2234 Fixed in 1000.100.108.2234 Patch available CNA
  • Elliptic Human Presence Detection Device Driver for X13 Gen 5 (Type 21LU, 21LV) VendorLenovo Affected before 1000.100.108.801 Fixed in 1000.100.108.801 Patch available CNA
  • Elliptic Virtual Lock Sensor for X13 Yoga Gen 4 (Type 21F2, 21F3) VendorLenovo Affected before 1000.100.108.761 Fixed in 1000.100.108.761 Patch available CNA

Remediation

  • Fix · CNA Elliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW) (Lenovo) Fixed in 1000.100.108.548
  • Fix · CNA Elliptic Human Presence Detection Driver for ThinkPad P1 Gen 7 (Type 21KV, 21KW) (Lenovo) Fixed in 1000.100.108.801
  • Fix · CNA Elliptic Virtual Lock Sensor Service for P14s Gen 4 (Type 21HF, 21HG) (Lenovo) Fixed in 1000.100.108.858
  • Fix · CNA Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 4 (Type 21K5, 21K6) (Lenovo) Fixed in 1000.100.108.1893
  • Fix · CNA Elliptic Human Presence Detection Driver for ThinkPad P14s Gen 5 (Type 21G2, 21G3) (Lenovo) Fixed in 1000.100.108.801
  • Fix · CNA Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 5 (Type 21ME, 21MF) (Lenovo) Fixed in 1000.100.108.6136
  • Fix · CNA Elliptic Human Presence detection Device Driver for ThinkPad P16 Gen 2 (Type 21FA, 21FB) (Lenovo) Fixed in 1000.100.108.774
  • Fix · CNA Elliptic Virtual Lock Sensor Service for P16s Gen 2 (Type 21HK, 21HL) (Lenovo) Fixed in 1000.100.108.858
  • Fix · CNA Elliptic Human Presence Detection Device Driver for ThinkPad P16s Gen 2 (Type 21K9, 21KA) (Lenovo) Fixed in 1000.100.106.2391
  • Fix · CNA lliptic Human Presence Detection Driver for P16s Gen 3 (Type 21KS, 21KT) (Lenovo) Fixed in 1000.100.108.801
  • Fix · CNA Elliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 1 (Type 21FC, 21FD) (Lenovo) Fixed in 1000.100.108.900
  • Fix · CNA Elliptic Human Presence Detection Driver for ThinkPad P16v Gen 1 (Type 21FE, 21FF) (Lenovo) Fixed in 1000.100.108.2235
  • Fix · CNA Elliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 2 (Type 21KX, 21KY) (Lenovo) Fixed in 1000.100.108.801
  • Fix · CNA Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21AH, 21AJ) (Lenovo) Fixed in 3.2.61209.5
  • Fix · CNA Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21CF, 21CG)) (Lenovo) Fixed in 3.2.61209.5
  • Fix · CNA Elliptic Virtual Lock Sensor Service for T14 Gen 4 (Type 21HD, 21HE) (Lenovo) Fixed in 1000.100.108.858
  • Fix · CNA Elliptic Human Presence Detection Device Driver for T14 Gen 4 (Type 21K3, 21K4) (Lenovo) Fixed in 1000.100.108.1893
  • Fix · CNA lliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21MC, 21MD) (Lenovo) Fixed in 1000.100.108.6136
  • Fix · CNA Elliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21ML, 21MM) (Lenovo) Fixed in 1000.100.108.801
  • Fix · CNA Elliptic Virtual Lock Sensor Service for T14s Gen 4 (Type 21F6, 21F7) (Lenovo) Fixed in 1000.100.108.858
  • Fix · CNA Elliptic Human Presence Detection Device Driver for ThinkPad T14s Gen 4 (Type 21F8, 21F9) (Lenovo) Fixed in 1000.100.108.1893
  • Fix · CNA Elliptic Human Presence Detection Device Driver for T14s Gen 5 (Type 21LS, 21LT) (Lenovo) Fixed in 1000.100.108.801
  • Fix · CNA Elliptic Human Presence Detection driver for ThinkPad T14s Gen 6 (Type 21M1, 21M2) (Lenovo) Fixed in 1000.100.109.82
  • Fix · CNA Elliptic Virtual Lock Sensor Service for T16 Gen 2 (Type 21HH, 21HJ) (Lenovo) Fixed in 1000.100.108.858
  • Fix · CNA Elliptic Human Presence Detection Device Driver for T16 Gen 2 (Type 21K7 21K8) (Lenovo) Fixed in 1000.100.106.2391
  • Fix · CNA Elliptic Human Presence Detection Device Driver for T16 Gen 3 (Type 21MN, 21MQ) (Lenovo) Fixed in 1000.100.108.801
  • Fix · CNA Elliptic Virtual Lock Sensor Service for X1 2-in-1 Gen 9 (Type 21KE, 21KF) (Lenovo) Fixed in 1000.100.108.801
  • Fix · CNA Elliptic Virtual Lock Sensor Service for ThinkPad X1 Carbon 12th Gen (Type 21KC, 21KD) (Lenovo) Fixed in 1000.100.108.801
  • Fix · CNA Elliptic Human Presence Detection Device Driver for X13 2-in-1 Gen 5 (Type 21LW, 21LX) (Lenovo) Fixed in 1000.100.108.801
  • Fix · CNA Elliptic Virtual Lock Sensor for ThinkPad X13 Gen 4 (Type 21EX, 21EY) (Lenovo) Fixed in 1000.100.108.761
  • Fix · CNA Elliptic Human Presence Detection Driver for ThinkPad X13 Gen 4 (Type 21J3, 21J4) (Lenovo) Fixed in 1000.100.108.2234
  • Fix · CNA Elliptic Human Presence Detection Device Driver for X13 Gen 5 (Type 21LU, 21LV) (Lenovo) Fixed in 1000.100.108.801
  • Fix · CNA Elliptic Virtual Lock Sensor for X13 Yoga Gen 4 (Type 21F2, 21F3) (Lenovo) Fixed in 1000.100.108.761

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-0886
  2. 2026-10-03 Alias added: GHSA-4599-7962-c7jc

References

Other 1

  • TI-2017-03639 Improper handling of exceptional conditions in Apache Struts KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07516 Insecure Platform Key (PK) used in UEFI system firmware signature CVSS 3.1MEDIUM 6.4
  • TI-2017-13070 OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory… CVSS 3.0CRITICAL 9.8
  • TI-2017-02875 OS command injection in Lenovo Service Framework application CVSS 3.0CRITICAL 9.8
  • TI-2013-01192 Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate… CVSS 2.0HIGH 9.3
  • TI-2026-53163 Hard-coded credentials in Lenovo Health Application CVSS 4.0CRITICAL 9.3
See all 534 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences