The vulnerability arises from improper link resolution before file access in TUBITAK BILGEM's Pardus About. An attacker can manipulate symbolic links to access files outside the intended directory, leading to reading or possibly modifying sensitive system files. This flaw, classified as CWE‑59, could expose confidential data or, in worst cases, enable privilege escalation.

The affected software is Pardus About from TUBITAK BILGEM Software Technologies Research Institute. All installations running a version earlier than 1.2.1 are vulnerable. No other products or vendors are listed as impacted.

The CVSS score of 8.8 indicates a high severity vulnerability. EPSS information is not available, and the issue is not listed in CISA's KEV catalog. The flaw can be exploited by crafting a malicious symbolic link that points to restricted files; while the attack is feasible locally or via remote triggers depending on the environment, the description does not explicitly state the required conditions, so we infer it is primarily a local exploitation vector. If an attacker gains execution or file read privileges, sensitive information could be disclosed.