Local Privilege Escalation Vulnerability in NetworkManager: Security Update Required
Summary
ALSA-2026:58572: Moderate: NetworkManager security update. Affects NetworkManager versions < 1:1.54.3-5.el9_8. Fixed in 1:1.54.3-5.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
NetworkManager is a vital system network service that manages network devices and connections, ensuring active network connectivity across various interfaces such as Ethernet, wireless, mobile broadband (WWAN), and PPPoE. It also supports VPN integration with multiple services, making it a crucial component for network management in AlmaLinux environments. However, a recent vulnerability has been identified that could allow local privilege escalation through malformed MUD URLs in the dhclient backend.
Vulnerability Detail
The vulnerability, identified as CVE-2026-10805, arises from the handling of malformed Manufacturer Usage Description (MUD) URLs within the dhclient backend of NetworkManager. This flaw could potentially allow an attacker with local access to escalate their privileges, leading to unauthorized access to sensitive system resources. The implications of this vulnerability are significant, as it could compromise the integrity and confidentiality of the system.
How To Fix
Minimum fixed version
1:1.54.3-5.el9_8
This is the first release that contains the fix.
sudo dnf update NetworkManagerTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users are advised to restrict local access to the system until the patch is applied. This can be done by ensuring that only trusted users have access to the machine and monitoring for any suspicious activity.
Conclusion
The identified vulnerability in NetworkManager poses a significant risk of local privilege escalation. It is crucial for users to update their packages to the patched version to mitigate this risk. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for NetworkManager →
FAQ
CVE-2026-10805 is a vulnerability in NetworkManager that allows local privilege escalation via malformed MUD URLs in the dhclient backend.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Check your application against this vulnerability using the Vulert playground at Vulert Scanner.
The risks include unauthorized access to sensitive system resources, which could lead to data breaches or system compromise.
You can update your packages using the command: sudo dnf update NetworkManager NetworkManager-adsl NetworkManager-bluetooth NetworkManager-cloud-setup NetworkManager-config-connectivity-redhat NetworkManager-config-server NetworkManager-dispatcher-routing-rules NetworkManager-initscripts-updown NetworkManager-libnm NetworkManager-libnm-devel NetworkManager-ovs NetworkManager-ppp NetworkManager-team NetworkManager-tui NetworkManager-wifi NetworkManager-wwan.
Yes, Vulert allows you to monitor vulnerabilities using just a manifest file like package-lock.json, without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for NetworkManager.
