Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

xfs_admin lacks user-controlled input validation for its parameters, this can lead to OS command injection or, depending on how xfs_admin is being executed, to a local privilege escalation.