A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.
CVSS Details
- CVSS 3.0 Base Score: 3.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade NetworkManager-pppUpgrade NetworkManager-tuiUpgrade NetworkManagerUpgrade NetworkManager-adslUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-ovsUpgrade NetworkManager-wwanUpgrade NetworkManager-initscripts-updownUpgrade NetworkManager-teamUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-libnm-develUpgrade NetworkManager-config-serverUpgrade NetworkManager-wifiUpgrade NetworkManager-libnmUpgrade NetworkManager-bluetooth | May 27, 2026 | May 19, 2026 |
| Oracle_linux | — | Upgrade NetworkManager-initscripts-updownUpgrade NetworkManager-wwanUpgrade NetworkManager-config-serverUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-ovsUpgrade NetworkManager-teamUpgrade NetworkManager-wifiUpgrade NetworkManager-adslUpgrade NetworkManager-pppUpgrade NetworkManager-tuiUpgrade NetworkManager-config-connectivity-oracleUpgrade NetworkManager-bluetoothUpgrade NetworkManager-libnm-develUpgrade NetworkManagerUpgrade NetworkManager-libnm | Oct 22, 2026 | Dec 12, 2025 |
| Redhat_linux | — | Upgrade NetworkManagerUpgrade NetworkManager-pppUpgrade NetworkManager-wifiUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManager-ovsUpgrade NetworkManager-initscripts-updownUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-libnmUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-config-serverUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-adsl-debuginfoNo solution existsUpgrade NetworkManager-bluetoothUpgrade NetworkManager-wwanUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-debuginfoUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-libnm-develUpgrade NetworkManager-debugsourceUpgrade NetworkManager-dispatcher-routing-rules | May 20, 2026 | Dec 12, 2025 |
| Rocky_linux | — | Upgrade NetworkManager-libnm-develUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManager-bluetoothUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-wifiUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-debuginfoUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-wwanUpgrade NetworkManager-libnmUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-ovsUpgrade NetworkManager-team | Jun 1, 2026 | May 28, 2026 |
| Ubuntu | — | Upgrade network-manager | May 25, 2026 | Jan 26, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub