CVE-2026-91841 HIGH

CVE-2026-91841: Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection

Vendor Gnome

Product NetworkManager-vpnc

Weakness CWE-93 · CRLF injection

Published September 25, 2026

Last update September 26, 2026

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.

Key dates

02Disclosure timeline

September 25, 2026 CVE published

September 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-91841 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/93.html AskarLabs — CWE-93 write-up CRLF Injection

Related vulnerabilities

CVE-2026-91841: Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection

01Description

02Disclosure timeline

03References

04Related CVE