This vulnerability, identified as CVE-2026-14460, is a missing authorization issue (CWE-862) in the pardus-software product by TUBITAK BILGEM Software Technologies Research Institute. It affects versions up to 1.0.4 before 1.0.5. The flaw permits argument injection due to insufficient authorization controls, potentially allowing an attacker with limited privileges to escalate impact on the system. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) indicates the attack requires local access with low complexity and low privileges but results in high confidentiality, integrity, and availability impact. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

The vulnerability allows an attacker with local access and low privileges to bypass authorization controls, leading to argument injection. This can result in complete compromise of confidentiality, integrity, and availability of the affected system. The high CVSS score reflects the critical nature of the impact if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users should monitor vendor communications for updates. Until a patch is available, restrict local access to trusted users only and apply principle of least privilege to limit potential exploitation.