Security vulnerability affects the nfs-subdir-external-provisioner package. When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place.