CVE-2026-91841

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.

• CWE-93

• https://access.redhat.com/security/cve/CVE-2026-91841
• https://bugzilla.redhat.com/show_bug.cgi?id=2533651
• https://gitlab.gnome.org/Archive/NetworkManager-vpnc/-/work_items/20
• https://gitlab.gnome.org/Archive/NetworkManager-vpnc/-/work_items/20

Published

Sep 25, 2026

Last Modified

Sep 26, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-91836A flaw has been found in OpenClaw ClawScan up to 0.1.6. This…2.8
• CVE-2026-91837A flaw was found in NetworkManager-iodine, the iodine VPN pl…7.8
• CVE-2026-91838A flaw was found in NetworkManager-sstp, the SSTP VPN plugin…7.8
• CVE-2026-91839A flaw was found in NetworkManager-fortisslvpn, the FortiSSL…7.8
• CVE-2026-9184The 24liveblog - live blog tool plugin for WordPress is vuln…4.3
• CVE-2026-91840A flaw was found in NetworkManager-vpnc. This vulnerability …7.8
• CVE-2026-91842A vulnerability has been found in OpenBankProject OBP-API up…4.1
• CVE-2026-91843A stack overflow during the unauthenticated login process ma…9.8
• CVE-2026-91846Affected versions of MISP allow a collection element to be c…7.1
• CVE-2026-91847The Online Scheduling and Appointment Booking System WordPr…4.8
• CVE-2026-91848A vulnerability was identified in WuzhiCMS up to 4.1.0. Affe…7.3
• CVE-2026-91849A security flaw has been discovered in WuzhiCMS up to 4.1.0.…6.3