VIA

A command injection vulnerability in the VIA client for Linux allows a low-privileged local attacker to execute arbitrary commands with elevated privileges.