Threats tagged 'ghsa-7g9v-wrq3-g54m'

A command injection vulnerability exists in the xfs_admin utility of xfsprogs due to improper validation of user-supplied parameters. A local attacker with access to supply crafted input arguments can execute arbitrary operating system commands, potentially leading to local privilege escalation depending on the execution context of xfs_admin. On standard Red Hat Enterprise Linux systems, administrative restrictions limit exposure, but environments passing untrusted inputs without validation are at risk. No official patch or mitigation currently meets Red Hat's criteria for deployment.