The vulnerability is a missing authorization flaw that allows a local attacker to elevate privileges within the system. By exploiting this flaw, an attacker who can access the eta-register service can gain higher rights than intended, potentially enabling the execution of sensitive commands or configuration changes.

TÜBİTAK BİLGEM Software Technologies Research Institute eta-register, versions 2.0.8 and earlier before the 2.0.9 release are affected.

This vulnerability carries a CVSS score of 7.8, indicating a high severity level. The EPSS score is not available, so the current likelihood of exploitation is uncertain. The issue is not listed in the CISA KEV catalog, suggesting it has not been observed in the wild or reported as a widespread attack vector. The most likely attack vector is local: an attacker with system access could invoke the vulnerable component to gain elevated privileges. Safe configuration changes or upgrading the product are the recommended mitigations.