Local Privilege Escalation Vulnerability in NetworkManager Package
Summary
ALSA-2026:58555: Moderate: NetworkManager security update. Affects NetworkManager versions < 1:1.40.16-21.el8_10. Fixed in 1:1.40.16-21.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
NetworkManager is a vital system network service that manages network devices and connections, ensuring active network connectivity across various types of devices, including Ethernet, wireless, mobile broadband (WWAN), and PPPoE. It also integrates with different VPN services, making it a crucial component for network management in AlmaLinux. However, a recent vulnerability has been identified that could allow local privilege escalation through malformed MUD URLs in the dhclient backend.
Vulnerability Detail
The vulnerability, identified as CVE-2026-10805, arises from the handling of malformed Manufacturer Usage Description (MUD) URLs within the dhclient backend of NetworkManager. This flaw could potentially allow an attacker with local access to escalate their privileges, leading to unauthorized access and control over the system. The implications of this vulnerability are significant, as it could compromise the integrity and security of the affected systems.
How To Fix
Minimum fixed version
1:1.40.16-21.el8_10
This is the first release that contains the fix.
sudo dnf update NetworkManagerTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the affected system or disable the dhclient backend until the package is updated. However, this is not a permanent solution and should only be used until the patch is applied.
Conclusion
The identified vulnerability in NetworkManager poses a significant risk of local privilege escalation. It is crucial for users to update their packages to the patched version to mitigate this risk. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time, ensuring better security for your applications.
See every vulnerability recorded for NetworkManager →
FAQ
CVE-2026-10805 is a vulnerability in NetworkManager that allows local privilege escalation through malformed MUD URLs in the dhclient backend.
You can use Vulert, which monitors open-source vulnerabilities in your software by analyzing a manifest file like package-lock.json. Visit Vulert Scanner to check if your application is affected.
If you cannot update the package right away, consider restricting access to the affected system or disabling the dhclient backend as a temporary workaround.
Failing to address this vulnerability could lead to unauthorized access and control over your system, potentially compromising sensitive data and system integrity.
For more details, refer to the CVE page associated with CVE-2026-10805 and the advisory provided by AlmaLinux.
Related vulnerabilities
Recent vulnerabilities recorded for NetworkManager.
