Detections
Analytics
CVE-2026-108472
high
Description
A flaw was found in the xfs_admin utility in xfsprogs. The tool does not properly validate user-supplied parameters, allowing operating system command injection. A local attacker can exploit this issue by providing crafted input arguments, which may result in arbitrary command execution and local privilege escalation depending on how xfs_admin is executed.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123708
https://bugzilla.redhat.com/show_bug.cgi?id=2548925
https://access.redhat.com/security/cve/CVE-2026-108472