Gnome NetworkManager-vpnc vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Gnome NetworkManager-vpnc: 2 record(s), with affected versions and fixes.
CVE-2026-91841
High · 7.8
CWE-93 Sep 25, 2026
Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection
A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.
CVE-2026-91840
High · 7.8
CWE-93 Sep 25, 2026
Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated.