{"id":"CVE-2026-95518","kind":"vulnerability","aliases":["CVE-2026-95518"],"related":[],"title":"Pardus Package Installer: race condition lets local users exploit install timing","description":"Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions.\n\nThis issue affects Pardus Package Installer: from 0.7.0 before 0.7.1.","summary":"Pardus Package Installer, from TÜBİTAK BİLGEM, has a time-of-check time-of-use race condition in versions 0.7.0 before 0.7.1. The sources say an attacker can exploit the timing gap between a check and a use, but do not describe the exact impact beyond that.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["linux","other","package-manager","pardus"],"not_affected_if":["version-outside-range"],"how_to_check":"- Check the installed Pardus Package Installer version; the affected range is `0.7.0` up to but not including `0.7.1`.","fix":"- Pardus Package Installer: move to `0.7.1` or later.","status":"open","published_at":"2026-11-13T13:18:31+00:00","first_seen_at":"2026-11-13T13:46:52+00:00","triaged_at":"2026-11-13T13:47:53+00:00","updated_at":"2026-11-13T13:47:53+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-13T13:47:53Z","model":"claude-haiku-5-5","output":{"fix":"- Pardus Package Installer: move to `0.7.1` or later.","reach":"local","title":"Pardus Package Installer: race condition lets local users exploit install timing","impact":"medium","summary":"Pardus Package Installer, from TÜBİTAK BİLGEM, has a time-of-check time-of-use race condition in versions 0.7.0 before 0.7.1. The sources say an attacker can exploit the timing gap between a check and a use, but do not describe the exact impact beyond that.","audience":"businesses","category":"other","nicknames":[],"who_cares":["pardus","linux","package-manager"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; sources only name a TOCTOU race condition","analyst_note":"Confirm the attack preconditions and worst-case impact from the NVD entry or the Pardus advisory; sources do not say what the race allows.","how_to_check":"- Check the installed Pardus Package Installer version; the affected range is `0.7.0` up to but not including `0.7.1`.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["version-outside-range"],"who_is_affected":"Systems running Pardus Package Installer from 0.7.0 before 0.7.1 are affected. The sources do not describe the exact trigger or privilege boundary, so whether a non-privileged local user can abuse it is unknown.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000725,"input_tokens":4619,"output_tokens":527,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-95518':14A,17A '0.7.0':44B,114C '0.7.1':46B,116C 'affect':109C 'allow':93C 'araştırma':88C 'attack':51B 'beyond':70B 'bilgem':29B,85C 'check':35B,59B,74C,98C 'condit':5A,41B,81C,106C 'cve':12A,15A 'describ':66B 'enstitüsü':89C 'exact':68B 'exploit':9A,53B 'gap':56B 'impact':69B 'instal':3A,10A,26B,92C,112C 'issu':108C 'let':6A 'leverag':94C 'linux':18B 'local':7A 'manag':22B 'packag':2A,21B,25B,91C,111C 'package-manag':20B 'pardus':1A,23B,24B,90C,110C 'race':4A,40B,80C,105C 'say':49B 'sourc':48B 'teknolojileri':87C 'time':11A,33B,37B,55B,72C,76C,96C,101C 'time-of-check':32B,71C,95C 'time-of-us':36B,75C,100C 'toctou':79C,104C 'tübitak':28B,84C 'use':39B,62B,78C,103C 'user':8A 'version':43B 'vulner':82C 'yazılım':86C","nicknames":[],"mitigations":[],"who_affected":"Systems running Pardus Package Installer from 0.7.0 before 0.7.1 are affected. The sources do not describe the exact trigger or privilege boundary, so whether a non-privileged local user can abuse it is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","linux","other","packagemanager","pardus"],"campaign_type":null,"search_a":"'-2026':13A,16A '-95518':14A,17A 'condit':5A 'cve':12A,15A 'exploit':9A 'instal':3A,10A 'let':6A 'local':7A 'packag':2A 'pardus':1A 'race':4A 'time':11A 'user':8A","search_b":"'0.7.0':44B '0.7.1':46B 'attack':51B 'beyond':70B 'bilgem':29B 'check':35B,59B 'condit':41B 'describ':66B 'exact':68B 'exploit':53B 'gap':56B 'impact':69B 'instal':26B 'linux':18B 'manag':22B 'packag':21B,25B 'package-manag':20B 'pardus':23B,24B 'race':40B 'say':49B 'sourc':48B 'time':33B,37B,55B 'time-of-check':32B 'time-of-us':36B 'tübitak':28B 'use':39B,62B 'version':43B","search_c":"'0.7.0':114C '0.7.1':116C 'affect':109C 'allow':93C 'araştırma':88C 'bilgem':85C 'check':74C,98C 'condit':81C,106C 'enstitüsü':89C 'instal':92C,112C 'issu':108C 'leverag':94C 'packag':91C,111C 'pardus':90C,110C 'race':80C,105C 'teknolojileri':87C 'time':72C,76C,96C,101C 'time-of-check':71C,95C 'time-of-us':75C,100C 'toctou':79C,104C 'tübitak':84C 'use':78C,103C 'vulner':82C 'yazılım':86C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T13:18:31+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"iletisim@usom.gov.tr","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95518","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95518","severity":null,"published_at":"2026-11-13T13:18:31+00:00","modified_at":"2026-11-13T13:18:31+00:00","first_seen_at":"2026-11-13T13:46:52+00:00","fetched_at":"2026-11-13T13:46:52+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}