Local Privilege Escalation Vulnerability in NetworkManager
Summary
RLSA-2026:58572: Moderate: NetworkManager security update. Affects NetworkManager versions < 1:1.54.3-5.el9_8. Fixed in 1:1.54.3-5.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
NetworkManager is a vital system network service designed to manage network devices and connections, ensuring active network connectivity across various types of connections, including Ethernet, wireless, mobile broadband (WWAN), and PPPoE. It also supports VPN integration with multiple services, making it a crucial component for users and systems requiring reliable network management. However, a security flaw has been identified that could allow local users to escalate their privileges.
Vulnerability Detail
The vulnerability, identified as CVE-2026-10805, arises from the handling of malformed Manufacturer Usage Description (MUD) URLs in the dhclient backend of NetworkManager. This flaw can be exploited by local users to gain elevated privileges, potentially compromising system integrity and security. The ramifications of this vulnerability are significant, as it allows unauthorized access to sensitive system functions, which could lead to further exploitation or data breaches.
How To Fix
Minimum fixed version
1:1.54.3-5.el9_8
This is the first release that contains the fix.
sudo dnf update NetworkManagerTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the security update as soon as it is available.
Conclusion
In summary, the identified vulnerability in NetworkManager poses a significant risk of local privilege escalation. It is crucial for users to update their software to the latest patched version to safeguard their systems. Utilizing tools like Vulert can further enhance security by providing real-time monitoring for vulnerabilities.
See every vulnerability recorded for NetworkManager →
FAQ
CVE-2026-10805 is a vulnerability in NetworkManager that allows local privilege escalation via malformed MUD URLs in the dhclient backend.
You can check your version of NetworkManager by running 'rpm -qa | grep NetworkManager' in your terminal.
The vulnerability could allow local users to escalate their privileges, potentially compromising system security and integrity.
Yes, a patch is available. Update NetworkManager to version 1:1.54.3-5.el9_8 or later to fix the vulnerability.
Vulert can monitor and alert in real-time for open-source vulnerabilities in your software using just a manifest file like package-lock.json, without requiring code access or installation.
Related vulnerabilities
Recent vulnerabilities recorded for NetworkManager.
