Skip to content
fr Sign in
6.7 Medium

CVE-2026-10805 Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend

Description

A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.

CVSS 3.1 detail

Vector CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitable with local access to the machine, with an ordinary account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Local
Attack complexity
High
Privileges required
Low
Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected products and versions

Product Affected versions Fixed in
Multicluster Engine for Kubernetes Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat JBoss Enterprise Application Platform Expansion Pack Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Versions not published
Show the 10 other branches
Product Affected versions Fixed in
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Versions not published
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Versions not published
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Versions not published
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Versions not published
Red Hat Enterprise Linux 8.8 Telecommunications Update Service Versions not published
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.6 Extended Update Support Versions not published
Red Hat Hardened Images Versions not published
Red Hat OpenShift Container Platform 5 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Multicluster Engine for Kubernetes

The 79 CVEs of Multicluster Engine for Kubernetes →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Medium CVE-2026-114236 storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a… 3.3 Low CVE-2026-71297 A flaw was found in the maestro gRPC broker 5.4 Medium CVE-2026-71299 A flaw was found in Maestro 6.5 Medium
Track this CVE