An uncontrolled search path vulnerability in the LanSchool Classic client allows a local authenticated user to place malicious code and cause the application to load it, giving the attacker arbitrary code execution with elevated privileges. This flaw stems from improper handling of the library search paths, classified as CWE-427. Successful exploitation could enable a local user to run arbitrary commands, modify system files, or install persistent malware, compromising the confidentiality, integrity, and availability of the affected computer.

The vulnerability affects the LanSchool Classic client application from Lenovo. All installations running a version earlier than 9.3.1.30 are susceptible. Devices using older client releases on any platform supported by LanSchool Classic are at risk.

The vulnerability carries a CVSS score of 8.5, indicating high severity. No EPSS score is provided. It is not listed in CISA KEV, suggesting no publicly disclosed exploit yet. The attack vector is local; an authenticated user with access to the client must exploit the flaw, typically by manipulating the search path to introduce a malicious library. If the attacker succeeds, they gain code execution rights with the privileges of the LanSchool client, potentially escalating to higher system privileges.