A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade NetworkManager-bluetoothUpgrade NetworkManager-libnmUpgrade NetworkManager-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-config-serverUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-wwanUpgrade NetworkManager-libnm-develNo solution existsUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-wifiUpgrade NetworkManager-initscripts-updownUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-teamUpgrade NetworkManager-debugsourceUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-ovsUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-ppp | Jul 17, 2026 | Jun 4, 2026 |
| Rocky_linux | — | Upgrade NetworkManager-debugsourceUpgrade NetworkManager-tuiUpgrade NetworkManager-wwanUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-debuginfoUpgrade NetworkManager-libnm-develUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManagerUpgrade NetworkManager-wifiUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-ovsUpgrade NetworkManager-bluetoothUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-libnm | Aug 26, 2026 | Aug 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub