CVE-2026-91840

Name of the Vulnerable Software and Affected Versions NetworkManager-vpnc (affected versions not specified)

Description A flaw in NetworkManager-vpnc allows a local unprivileged user to escalate privileges to root. An attacker can inject a newline character into the VPN username field to manipulate the vpnc configuration. This manipulation enables the execution of an arbitrary program with root privileges when the malicious VPN connection is activated, specifically by reaching a root password helper.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.