CVE-2024-28139 is a high-severity vulnerability where the www-data user can escalate privileges to root because sudo is configured to allow passwordless execution of the mount command. The vendor has accepted the risk and does not plan to issue a fix soon.