CVE-2026-16478: Arbitrary Package Installation in TÜBİTAK BİLGEM's pardus-nvidia-installer
Permissive list of allowed inputs vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-nvidia-installer allows Privilege Escalation.
This issue affects pardus-nvidia-installer: before 2.0.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pardus-nvidia-installerto a version that resolves this vulnerability.Fixed in 2.0.1
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs local access and low privileges. Exploitation does not require user interaction, but the attack complexity is rated high.
Which installations are affected?
pardus-nvidia-installer versions before 2.0.1 are affected. The provided information does not state whether the vulnerable behavior is enabled or reachable in a default installation.
What is the security impact of successful exploitation?
Successful exploitation can lead to privilege escalation and arbitrary package installation. The reported impact includes high confidentiality, integrity, and availability effects.