An OS command injection vulnerability exists in TÜBİTAK BİLGEM Pardus Boot Repair versions from 1.0.8 up to but not including 1.0.9. This flaw allows an attacker with local privileges to execute arbitrary operating system commands due to improper neutralization of special elements in OS commands.