The Malware Analysis Appliance (MAA) executes binaries submitted for analysis inside a virtual machine (VM).  During analysis, artifacts in the form of files are retrieved from the VM by the host and are written to the host's file system.  A binary running in the VM can craft malicious content and specify where it is stored within the host file system.

A sample that has been loaded into MAA can, as a lower privileged user, use this vulnerability to create and overwrite certain files.  This could allow an attacker to cause a reboot or a reset to factory defaults.  In specialized circumstances, the attacker could execute code as a lower privileged user.