CVE-2026-79617

Deferred Deferred - Pending Action

Incorrect Permission Assignment in Pardus LightDM Greeter

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description

Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Greeter: before 0.4.15.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-30

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-29

NVD

CVE-2026-79617

EUVD

EUVD-2026-75019

Affected Vendors & Products

Vendor	Product	Version / Range
tubitak	pardus_lightdm_greeter	to 0.4.15 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-732	The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

Executive Summary

This vulnerability involves incorrect permission settings for a critical resource in the Pardus LightDM Greeter software. It allows attackers to exploit misconfigured access control security levels to gain unauthorized access or perform unintended actions.

Impact Analysis

An attacker could exploit this to gain elevated privileges, access sensitive data, or perform actions as a legitimate user. Systems running affected versions before 0.4.15 are at risk.

Compliance Impact

The vulnerability involves incorrect permission assignment for critical resources in Pardus LightDM Greeter, which could lead to unauthorized access or privilege escalation. This may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data security) by exposing sensitive user data or system configurations.

Mitigation Strategies

Update Pardus LightDM Greeter to version 0.4.15 or later to address the incorrect permission assignment issue.

Hi! I’m here to help you understand CVE-2026-79617. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70