This vulnerability in pardus-image-writer allows an attacker with local privileges to externally control file names or paths used by the software. This can result in the removal of important client functionality, potentially impacting the integrity and availability of the software's operations. The CVSS 3.1 score is 7.1, indicating high severity with local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and high availability impact. The affected versions are all versions before 1.0.4. No vendor advisory or patch information is currently provided.

The vulnerability can lead to significant integrity and availability issues by allowing external control over file paths or names, which may cause removal or disruption of critical client functionality in pardus-image-writer. Confidentiality is not impacted. Exploitation requires local access with low privileges and no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to file operations within pardus-image-writer.