Dell Terraform Provider for Dell PowerFlex contains an OS Command Injection vulnerability in the SDC host provisioning component. A high privileged remote attacker with access to the PowerFlex management plane could exploit this flaw to execute arbitrary OS commands on provisioned SDC hosts, potentially leading to full compromise of those hosts.