This vulnerability (CVE-2024-12970) affects Pardus OS My Computer prior to version 0.7.2 and is classified as CWE-78 (OS Command Injection). It results from improper neutralization of special characters in OS commands, potentially enabling an attacker with local privileges and user interaction to execute arbitrary commands. The CVSS 3.1 base score is 3.9 (low), with attack vector as physical (local), low attack complexity, requiring low privileges and user interaction, and impacts confidentiality, integrity, and availability at a low level. No patch or official remediation level has been published by the vendor or assigner (TR-CERT).

An attacker with local access and low privileges who can induce user interaction may exploit this vulnerability to execute arbitrary OS commands. The impact on confidentiality, integrity, and availability is low. There are no known exploits in the wild, and the vulnerability requires specific conditions to be exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit local access to trusted users and avoid executing untrusted input in the affected component. Monitor vendor channels for updates regarding patches or official mitigations.