CVE-2026-91841

Summary

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.

Affected Software

VendorProductVersion RangeStatus
GNOMENetworkManager-vpnc0 < *affected

Weaknesses

  • CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')

Workarounds

To mitigate this issue, remove the NetworkManager-vpnc package if the vpnc VPN plugin functionality is not required on the system. This will prevent a local unprivileged user from exploiting the flaw. To remove the package, use the following command: sudo dnf remove NetworkManager-vpnc Note that removing this package will disable the ability to use vpnc-based VPN connections.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: total

Additional References

References