This vulnerability (CVE-2026-8108) affects Fuji Electric Tellus version 5.0.2. It arises from a kernel driver that is installed with read and write permissions accessible to all users, which constitutes a dangerous exposure of functionality as classified by CWE-749. The vulnerability can be exploited by unauthorized local users to compromise the system's confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.8, reflecting high severity with local attack vector, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. There is currently no official patch or remediation guidance from the vendor, and no known exploits have been observed in the wild.

An unauthorized local user could leverage the overly permissive kernel driver to gain unauthorized access and potentially compromise the confidentiality, integrity, and availability of the affected system. This could lead to unauthorized data access, modification, or denial of service conditions on Fuji Electric Tellus version 5.0.2.

No official patch or remediation guidance is currently available from the vendor. Users should monitor vendor advisories for updates. Until a fix is released, restricting local user access to the affected system and limiting permissions where possible may reduce risk.