
Proof-of-concept and technical write-up for CVE-2025-68921, a local privilege escalation vulnerability in Nahimic audio software allowing low-privileged users to gain NT AUTHORITY\SYSTEM access on gaming laptops.
A local privilege escalation vulnerability exists in Nahimic, an audio enhancement software pre-installed on many gaming laptops. The issue allows a low-privileged user to escalate privileges to NT AUTHORITY\SYSTEM .
This vulnerability was reported to Lenovo PSIRT, tracked as LEN-18785, and later assigned CVE-2025-68921 after the fix.
https://nvd.nist.gov/vuln/detail/CVE-2025-68921