{"id":251135,"date":"2026-05-21T02:46:00","date_gmt":"2026-05-21T06:46:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/21\/cve-2026-5140-flaw-grants-root-access-on-pardus-linux\/"},"modified":"2026-05-21T05:30:08","modified_gmt":"2026-05-21T09:30:08","slug":"cve-2026-5140-flaw-grants-root-access-on-pardus-linux","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/21\/cve-2026-5140-flaw-grants-root-access-on-pardus-linux\/","title":{"rendered":"CVE-2026\u20135140 Flaw Grants Root Access On Pardus Linux"},"content":{"rendered":"

CVE-2026\u20135140 Flaw Grants Root Access On Pardus Linux<\/a><\/p>\n

https:\/\/thecyberexpress.com\/cve-2026-5140-pardus-linux-root-access-flaw\/<\/a><\/p>\n

Publish Date: 2026-05-21 02:46:00<\/a><\/p>\n

Source Domain: thecyberexpress.com<\/a><\/p>\n

A critical local privilege escalation vulnerability chain tracked as CVE-2026\u20135140 has exposed serious security weaknesses in Pardus Linux. Researchers revealed that the flaws allow any unprivileged local user to gain full root access without authentication, potentially leading to complete system compromise within seconds.<\/span>\u00a0<\/span><\/p>\n

The vulnerability affects the\u00a0<\/span>pardus-update<\/span>\u00a0package, which handles system updates through graphical tools and privileged Python helper scripts. The issue received a CVSS v3.1 score of 9.3, classifying it as \u201cCritical.\u201d The published vector is:<\/span>\u00a0<\/span><\/p>\n

CVSS:3.1\/AV:L\/AC:L\/PR:N\/UI:N\/S:C\/C:H\/I:H\/A:H<\/span>\u00a0<\/span><\/p>\n

Maintained by T\u00dcB\u0130TAK, Pardus Linux is widely used across Turkish government institutions, schools, and enterprise environments. Researchers\u00a0stated\u00a0that the attack chain behind CVE-2026\u20135140 combines three separate vulnerabilities: a\u00a0Polkit\u00a0authorization bypass, a CRLF injection flaw, and an untrusted search path issue.<\/span>\u00a0<\/span><\/p>\n

Polkit Misconfiguration Opens the Door<\/span>\u00a0<\/span><\/h3>\n

The first issue was\u00a0identified\u00a0in the file:<\/span>\u00a0<\/span><\/p>\n

\/usr\/share\/polkit-1\/actions\/tr.org.pardus.pkexec.pardus-update.policy<\/span>\u00a0<\/span><\/p>\n

\"report-ad-banner\"<\/p>\n

Researchers discovered that several privileged actions were configured with unrestricted access permissions:<\/span>\u00a0<\/span><\/p>\n

<\/span>
\u00a0yes<\/span>
\u00a0yes<\/span>
\u00a0yes<\/span>
\u00a0<\/span><\/p>\n

Because of this configuration, any local user could execute privileged operations through\u00a0<\/span>pkexec<\/span>\u00a0without entering an administrator password. The vulnerable actions included\u00a0<\/span>aptupdateaction<\/span>,\u00a0<\/span>autoaptupgradeaction<\/span>, and\u00a0<\/span>systemsettingswrite<\/span>.<\/span>\u00a0<\/span><\/p>\n

This allowed attackers to run the following scripts as root:<\/span>\u00a0<\/span><\/p>\n