{"id":"CVE-2026-92606","kind":"vulnerability","aliases":["CVE-2026-92606"],"related":[],"title":"Pardus MyComputer: race condition lets local users exploit file checks","description":"Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus MyComputer allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions.\n\nThis issue affects Pardus MyComputer: from 0.8.0 before 0.8.1.","summary":"Pardus MyComputer versions from 0.8.0 before 0.8.1 have a time-of-check time-of-use race condition. A local user who wins the timing window may be able to change what the program acts on after it has checked it.","severity":"medium","cvss":6.0,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Pardus MyComputer","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["linux","other","pardus","pardus-mycomputer"],"not_affected_if":["version-0.8.1-or-later"],"how_to_check":"- Check the installed Pardus MyComputer version; it is affected if it is at or above `0.8.0` and below `0.8.1`.","fix":"- Pardus MyComputer: upgrade to `0.8.1`.","status":"open","published_at":"2026-11-09T09:16:59+00:00","first_seen_at":"2026-11-09T09:25:32+00:00","triaged_at":"2026-11-09T09:26:17+00:00","updated_at":"2026-11-09T09:26:17+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-09T09:26:17Z","model":"claude-haiku-5-5","output":{"fix":"- Pardus MyComputer: upgrade to `0.8.1`.","reach":"local","title":"Pardus MyComputer: race condition lets local users exploit file checks","impact":"medium","summary":"Pardus MyComputer versions from 0.8.0 before 0.8.1 have a time-of-check time-of-use race condition. A local user who wins the timing window may be able to change what the program acts on after it has checked it.","audience":"businesses","category":"other","nicknames":[],"who_cares":["pardus","pardus-mycomputer","linux"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"local user gains unintended file access through race","analyst_note":"Confirm the privilege level the program runs with and what file operation the race affects, from the NVD entry or the vendor advisory.","how_to_check":"- Check the installed Pardus MyComputer version; it is affected if it is at or above `0.8.0` and below `0.8.1`.","plain_action":"","product_name":"Pardus MyComputer","needs_analyst":true,"not_affected_if":["version-0.8.1-or-later"],"who_is_affected":"Only installations of Pardus MyComputer from 0.8.0 before 0.8.1 are listed. The sources do not say what privileges the program runs with or which data it handles, so unknown whether the race crosses a privilege boundary.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000724,"input_tokens":4598,"output_tokens":529,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-92606':13A,16A '0.8.0':29B,107C '0.8.1':31B,109C 'abl':54B 'act':60B 'affect':103C 'allow':87C 'bilgem':80C 'chang':56B 'check':10A,37B,65B,69C,92C 'condit':4A,43B,76C,100C 'cve':11A,14A 'exploit':8A 'file':9A 'institut':84C 'issu':102C 'let':5A 'leverag':88C 'linux':19B 'local':6A,45B 'may':52B 'mycomput':2A,24B,26B,86C,105C 'mycomputer':18A 'pardus':1A,17A,21B,23B,25B,85C,104C 'pardus-mycomput':22B 'program':59B 'race':3A,42B,75C,99C 'research':83C 'softwar':81C 'technolog':82C 'time':35B,39B,50B,67C,71C,90C,95C 'time-of-check':34B,66C,89C 'time-of-us':38B,70C,94C 'toctou':74C,98C 'tübitak':79C 'use':41B,73C,97C 'user':7A,46B 'version':27B 'vulner':77C 'win':48B 'window':51B","nicknames":[],"mitigations":[],"who_affected":"Only installations of Pardus MyComputer from 0.8.0 before 0.8.1 are listed. The sources do not say what privileges the program runs with or which data it handles, so unknown whether the race crosses a privilege boundary.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["mycomputer","pardusmycomputer"],"ptokens":["mycomputer","pardus"],"labels":["linux","medium","other","pardus","pardusmycomputer","vendor"],"campaign_type":null,"search_a":"'-2026':12A,15A '-92606':13A,16A 'check':10A 'condit':4A 'cve':11A,14A 'exploit':8A 'file':9A 'let':5A 'local':6A 'mycomput':2A 'mycomputer':18A 'pardus':1A,17A 'race':3A 'user':7A","search_b":"'0.8.0':29B '0.8.1':31B 'abl':54B 'act':60B 'chang':56B 'check':37B,65B 'condit':43B 'linux':19B 'local':45B 'may':52B 'mycomput':24B,26B 'pardus':21B,23B,25B 'pardus-mycomput':22B 'program':59B 'race':42B 'time':35B,39B,50B 'time-of-check':34B 'time-of-us':38B 'use':41B 'user':46B 'version':27B 'win':48B 'window':51B","search_c":"'0.8.0':107C '0.8.1':109C 'affect':103C 'allow':87C 'bilgem':80C 'check':69C,92C 'condit':76C,100C 'institut':84C 'issu':102C 'leverag':88C 'mycomput':86C,105C 'pardus':85C,104C 'race':75C,99C 'research':83C 'softwar':81C 'technolog':82C 'time':67C,71C,90C,95C 'time-of-check':66C,89C 'time-of-us':70C,94C 'toctou':74C,98C 'tübitak':79C 'use':73C,97C 'vulner':77C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T09:16:59+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H","cvss_by":"iletisim@usom.gov.tr","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92606","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92606","severity":null,"published_at":"2026-11-09T09:16:59+00:00","modified_at":"2026-11-09T09:16:59+00:00","first_seen_at":"2026-11-09T09:25:32+00:00","fetched_at":"2026-11-09T09:25:32+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}