{"id":"CVE-2026-92083","kind":"vulnerability","aliases":["CVE-2026-92083"],"related":[],"title":"pardus-image-writer: missing authorization lets users escalate privileges","description":"Missing Authorization vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü pardus-image-writer allows Privilege Escalation.\n\nThis issue affects pardus-image-writer: before 0.9.0.","summary":"pardus-image-writer, a disk image writing tool from TÜBİTAK BİLGEM, is missing an authorization check. A local user can use it to gain higher privileges than they should have.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["linux","other","pardus","pardus-image-writer"],"not_affected_if":["version-0.9.0-or-later"],"how_to_check":"- Check the installed version of pardus-image-writer; versions before `0.9.0` are affected.","fix":"- pardus-image-writer: move to `0.9.0` or later","status":"open","published_at":"2026-11-12T14:17:30+00:00","first_seen_at":"2026-11-12T14:38:37+00:00","triaged_at":"2026-11-12T14:39:03+00:00","updated_at":"2026-11-12T14:39:03+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-12T14:39:03Z","model":"claude-haiku-5-5","output":{"fix":"- pardus-image-writer: move to `0.9.0` or later\n- unknown","reach":"local","title":"pardus-image-writer: missing authorization lets users escalate privileges","impact":"high","summary":"pardus-image-writer, a disk image writing tool from TÜBİTAK BİLGEM, is missing an authorization check. A local user can use it to gain higher privileges than they should have.","audience":"businesses","category":"other","nicknames":[],"who_cares":["pardus-image-writer","linux","pardus"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"local user gains elevated privileges on the machine","analyst_note":"","how_to_check":"- Check the installed version of pardus-image-writer; versions before `0.9.0` are affected.\n- unknown","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["version-0.9.0-or-later"],"who_is_affected":"Systems running pardus-image-writer before 0.9.0 are affected. The sources do not say which deployments or configurations are most exposed, so unknown.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000667,"input_tokens":4568,"output_tokens":421,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-92083':13A,16A '0.9.0':76C 'affect':70C 'allow':65C 'araştırma':59C 'author':6A,39B,52C 'bilgem':35B,56C 'check':40B 'cve':11A,14A 'disk':29B 'enstitüsü':60C 'escal':9A,67C 'gain':48B 'higher':49B 'imag':3A,22B,26B,30B,63C,73C 'issu':69C 'let':7A 'linux':17B 'local':42B 'miss':5A,37B,51C 'pardus':2A,19B,21B,25B,62C,72C 'pardus-image-writ':1A,20B,24B,61C,71C 'privileg':10A,50B,66C 'teknolojileri':58C 'tool':32B 'tübitak':34B,55C 'use':45B 'user':8A,43B 'vulner':53C 'write':31B 'writer':4A,23B,27B,64C,74C 'yazılım':57C","nicknames":[],"mitigations":[],"who_affected":"Systems running pardus-image-writer before 0.9.0 are affected. The sources do not say which deployments or configurations are most exposed, so unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","linux","other","pardus","pardusimagewriter"],"campaign_type":null,"search_a":"'-2026':12A,15A '-92083':13A,16A 'author':6A 'cve':11A,14A 'escal':9A 'imag':3A 'let':7A 'miss':5A 'pardus':2A 'pardus-image-writ':1A 'privileg':10A 'user':8A 'writer':4A","search_b":"'author':39B 'bilgem':35B 'check':40B 'disk':29B 'gain':48B 'higher':49B 'imag':22B,26B,30B 'linux':17B 'local':42B 'miss':37B 'pardus':19B,21B,25B 'pardus-image-writ':20B,24B 'privileg':50B 'tool':32B 'tübitak':34B 'use':45B 'user':43B 'write':31B 'writer':23B,27B","search_c":"'0.9.0':76C 'affect':70C 'allow':65C 'araştırma':59C 'author':52C 'bilgem':56C 'enstitüsü':60C 'escal':67C 'imag':63C,73C 'issu':69C 'miss':51C 'pardus':62C,72C 'pardus-image-writ':61C,71C 'privileg':66C 'teknolojileri':58C 'tübitak':55C 'vulner':53C 'writer':64C,74C 'yazılım':57C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T14:17:30+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"iletisim@usom.gov.tr","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92083","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92083","severity":null,"published_at":"2026-11-12T14:17:30+00:00","modified_at":"2026-11-12T14:17:30+00:00","first_seen_at":"2026-11-12T14:38:37+00:00","fetched_at":"2026-11-12T14:38:37+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}