A command injection vulnerability in FreeBSD's bsdinstall and bsdconfig utilities allows an attacker within wireless range to execute arbitrary commands with elevated privileges.

The vulnerability (CWE-78) occurs when these utilities process Wi-Fi network names (SSIDs) containing malicious characters, which are then passed improperly to bsddialog(1). This is a network-adjacent, unauthenticated vulnerability.

Successful exploitation allows an attacker to gain full control over the system during the installation or configuration process. This is particularly dangerous as these tools often run with elevated (root) privileges, potentially leading to a complete system takeover. The CVSS score of 7.5 reflects the high impact of this vulnerability on system integrity and availability.

Immediate Action: Apply the vendor-provided security patches for the affected FreeBSD releases as specified in the FreeBSD-SA-26:23.bsdinstall advisory.

Proactive Monitoring: Monitor system logs for unauthorized execution of commands within the bsdinstall or bsdconfig contexts.

Compensating Controls: If patching is delayed, avoid performing Wi-Fi network scans in untrusted environments or when the security of the local wireless broadcast is not guaranteed.

Public Exploit Available: Unknown.

System administrators managing FreeBSD environments must ensure that the latest security patches are applied to mitigate this command injection risk. Given the potential for root-level code execution, this should be treated as a high-priority maintenance task for all affected FreeBSD releases.