CVE-2026-91840

Published: Sep 25, 2026Modified: Sep 30, 2026Deferred

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: patrick@puiterwijk.org (Secondary)

Description

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated.

Related CWEs

CWE-93

Improper Neutralization of CRLF Sequences ('CRLF Injection')

The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.

References (3)

https://access.redhat.com/security/cve/CVE-2026-91840

Source: patrick@puiterwijk.org

https://bugzilla.redhat.com/show_bug.cgi?id=2533642

Source: patrick@puiterwijk.org

https://gitlab.gnome.org/Archive/NetworkManager-vpnc/-/work_items/19

Source: patrick@puiterwijk.org

Timeline

No history available yet.