The vulnerability identified as CVE-2026-5161 in Pardus About is due to improper handling of symbolic links before accessing files, classified under CWE-59. This improper link resolution can be exploited to perform symlink attacks, potentially allowing an attacker to access or modify files they should not be able to. The issue affects versions before 1.2.2 of Pardus About. The CVSS v3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. No patch or official remediation level has been published by the vendor as of the data provided.

Successful exploitation of this vulnerability could allow an attacker to perform unauthorized file access or modification via symbolic link manipulation. This can lead to full compromise of confidentiality, integrity, and availability of affected systems running vulnerable versions of Pardus About. The CVSS score of 8.8 reflects the high impact potential. However, no known exploits are reported in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level has been published, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the Pardus About component and limiting user permissions to reduce the risk of exploitation.