This vulnerability (CWE-88) in pardus-software allows an attacker with local access and low privileges to inject malicious arguments into commands due to improper neutralization of argument delimiters. The CVSS 3.1 score is 8.8 (high), reflecting the potential for complete system compromise (confidentiality, integrity, availability). The affected versions are all versions up to and including 1.0.4, prior to 1.0.5. There is currently no vendor advisory or patch available to address this issue.

Successful exploitation can lead to full compromise of the affected system, including unauthorized disclosure of information, modification of data, and disruption of service. The vulnerability requires local access with low privileges but does not require user interaction. The scope is changed, meaning the vulnerability can affect resources beyond the initially compromised component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious command executions related to argument injection.