A flaw in HAVELSAN Inc.'s Liman Render Engine incorrectly assigns permissions to a critical system resource, enabling an attacker to elevate privileges. This weakness maps to CWE-732, Incorrect Permission Assignment for Critical Resource, and can compromise the confidentiality, integrity, or availability of the affected system by granting unauthorized access or control.

The vulnerability affects HAVELSAN Inc. Liman Render Engine, specifically all releases before version 1.2-81. Users running these legacy versions should verify which build they are operating with, as the issue has been resolved in 1.2-81 and later releases.

The CVSS score of 7.8 places this flaw in the High severity range, indicating significant impact if exploited. EPSS data is not available, and the vulnerability is not listed in CISA’s KEV catalog, so the current exploitation likelihood is unknown. Based on the description, the attack vector is inferred to require interaction with the rendering engine—potentially local or remote depending on deployment—but the official advisory does not disclose specific exposure details. Monitoring for unusual privilege escalation attempts and ensuring the system is updated remains prudent.