This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-108472 →
Unrated
A flaw was found in the xfs_admin utility in xfsprogs. The tool does not properly validate user-supplied parameters, allowing operating system command...
DEBIAN-CVE-2026-108472
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Debian:12xfsprogs |
All versions→ Not listed |
Not listed |
| Debian:13xfsprogs |
All versions→ Not listed |
Not listed |
| Debian:14xfsprogs |
All versions→ Not listed |
Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
A flaw was found in the xfs_admin utility in xfsprogs. The tool does not properly validate user-supplied parameters, allowing operating system command injection. A local attacker can exploit this issue by providing crafted input arguments, which may result in arbitrary command execution and local privilege escalation depending on how xfs_admin is executed.
Source: OSV.dev (Open Source Vulnerabilities) OSV
References
- advisory security-tracker.debian.org