diff --git a/changelogs/fragments/10599-open-iscsi-cmd-list.yml b/changelogs/fragments/10599-open-iscsi-cmd-list.yml
new file mode 100644
index 0000000000..f8ef659ee9
--- /dev/null
+++ b/changelogs/fragments/10599-open-iscsi-cmd-list.yml
@@ -0,0 +1,2 @@
+minor_changes:
+  - open_iscsi - using safer mechanism to run external command (https://github.com/ansible-collections/community.general/pull/10599).
diff --git a/plugins/modules/open_iscsi.py b/plugins/modules/open_iscsi.py
index 80360833a2..82f56a8cff 100644
--- a/plugins/modules/open_iscsi.py
+++ b/plugins/modules/open_iscsi.py
@@ -242,7 +242,7 @@ def target_login(module, target, check_rc, portal=None, port=None):
         params = [('node.session.auth.username_in', node_user_in),
                   ('node.session.auth.password_in', node_pass_in)]
         for (name, value) in params:
-            cmd = '%s --mode node --targetname %s --op=update --name %s --value %s' % (iscsiadm_cmd, target, name, value)
+            cmd = [iscsiadm_cmd, '--mode', 'node', '--targetname', target, '--op=update', '--name', name, '--value', value]
             module.run_command(cmd, check_rc=check_rc)
 
     cmd = [iscsiadm_cmd, '--mode', 'node', '--targetname', target, '--login']