A flaw in Samba allows a remote attacker to execute arbitrary commands by triggering shell injection through the misconfigured "check password script" feature, which processes the client-controlled username (%u) without safe escaping, resulting in remote code execution (CWE‑78).

Affected systems include Red Hat Enterprise Linux releases 6 through 9 and Red Hat OpenShift Container Platform 4 where Samba is deployed. Vulnerable configurations involve using the "check password script" with the %u placeholder and running the samba‑dcerpcd service as a system service.

The CVSS score of 9 indicates a severe risk; the lack of an EPSS score means the exploitation probability is currently unknown, but because the flaw permits command injection remotely over Samba, the potential for widespread compromise is high. The vulnerability is not listed in the CISA KEV catalog, yet based on the description, it is inferred that the attack vector involves remote network access to the Samba service with a misconfigured check‑password script, making privileged or service‑level exploitation feasible.