CVE-2026-108472

Name of the Vulnerable Software and Affected Versions xfsprogs (affected versions not specified)

Description The xfs admin utility fails to properly validate user-supplied parameters, which enables operating system command injection. A local attacker can exploit this by providing crafted input arguments, potentially leading to arbitrary command execution and local privilege escalation, especially when the tool is run with root privileges via sudo delegation or provisioning tools.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Keep untrusted input away from the xfs admin utility.