A malicious server can crash the OpenAFS cache manager and other client utilities, and possibly execute arbitrary code.