The vulnerability is an incorrect privilege assignment flaw that allows a user with lower rights to obtain higher privileges on the system. It enables attackers to elevate their access level, potentially gaining full control over the affected software and the underlying operating environment. The flaw is classified as CWE-266, indicating an authorization weakness where permissions are improperly granted.

The issue affects TUBITAK BILGEM Software Technologies Research Institute’s Pardus-software, specifically all releases before version 1.0.5. No other vendors or product versions are listed as impacted in the available data.

The CVSS score of 7.8 signifies a high severity vulnerability with a notable impact if exploited. EPSS data is not available, so the current exploit probability cannot be quantified, but the absence of a KEV listing suggests no confirmed exploitation in the wild to date. The likely attack vector is inferred to be local or authenticated, where a privileged user can manipulate internal privilege tables or configuration files. Exploitation would require the ability to create or alter user credentials or modify privilege assignments within the software.