Since this appears to be an issue with insufficient quoting I' not entirely sure whether this could theoretically exploited - in the unlikely case that one can convince a privileged user to execute umount from a specifically prepared directory.
Since this appears to be an issue with insufficient quoting I' not entirely sure whether this could theoretically exploited - in the unlikely case that one can convince a privileged user to execute umount from a specifically prepared directory.