The updated description confirms that TUBITAK BILGEM's Pardus Software Center suffers from improper privilege management and access control, enabling an attacker to hijack privileged processes. This flaw permits unauthorized execution of privileged actions, potentially compromising confidentiality, integrity, and availability of the affected system.

TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center, all versions earlier than 1.0.3.

The CVSS score of 8.8 reflects a high severity, and the EPSS score is not available while the vulnerability is not listed in the CISA KEV catalog. Based on the description it is inferred that an attacker who can interact with the Software Center—whether locally or remotely if the service is exposed—can exploit the improper access control to hijack a privileged process. Elevating privileges in this way could allow the attacker to modify system state, exfiltrate data, or disrupt services. The lack of an official workaround suggests that the primary protection is to prevent exploitation by applying the vendor’s fix.