This vulnerability (CVE-2026-44093) involves a local privilege escalation flaw in the init-script used for user-applications. The root cause is improper neutralization of special elements used in OS commands (CWE-78), which enables a low-privileged local user to execute arbitrary commands with root privileges. The vulnerability can lead to full system compromise. There is currently no patch or official remediation available, and no known active exploitation has been reported. The CVSS 4.0 vector indicates a local attack vector with low attack complexity and no user interaction required, resulting in high impact on confidentiality, integrity, and availability.

If exploited, this vulnerability allows a local attacker with low privileges to execute arbitrary commands as root, potentially leading to full system compromise. This can result in unauthorized access, modification, or destruction of system data and control over the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict local user access to trusted users only and monitor for suspicious local activity related to init-script execution.