An issue in the installer allows a local attacker to gain root privileges. This occurs because the installer does not sufficiently validate a user-modifiable configuration value during high-privilege upgrades, enabling the execution of arbitrary commands.