CVE-2026-10805

Name of the Vulnerable Software and Affected Versions NetworkManager (affected versions not specified)

Description A flaw in the dhclient backend of NetworkManager allows for local privilege escalation. The issue occurs when processing malformed Manufacturer Usage Description (MUD) URLs, which are used to provide devices with information about the network services they need. A local user can trigger a script via a crafted MUD URL to gain elevated privileges, but only if an administrator has explicitly configured NetworkManager to use dhclient. Default configurations are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.