CVE-2026-92083: Pardus Image Writer Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's pardus-image-writer
Published Nov 12, 2026
·Updated
Missing Authorization vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü pardus-image-writer allows Privilege Escalation.
This issue affects pardus-image-writer: before 0.9.0.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pardus-image-writerto a version that resolves this vulnerability.Fixed in 0.9.0
Event History
Nov 12, 2026
CVE Published
via MITRE·01:42 PM
Data Sourced
via MITRE·01:42 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
Exploitation requires local access and low-privileged access to the affected system. No user interaction is required.
2
Which installations are affected?
pardus-image-writer versions before 0.9.0 are affected. The vulnerability is a missing-authorization issue involving Polkit configuration.
3
What is the potential impact of successful exploitation?
A local low-privileged attacker may escalate privileges. The reported impact includes high confidentiality, integrity, and availability impact.