Local Privilege Escalation Vulnerability in NetworkManager by Red Hat
CVE-2026-10805
Key Information:
What is CVE-2026-10805?
A local privilege escalation vulnerability has been identified in NetworkManager, specifically within the dhclient backend. This flaw arises when NetworkManager processes incorrectly formatted Manufacturer Usage Description (MUD) URLs. A local user may exploit this vulnerability to escalate their privileges by crafting a malicious MUD URL that triggers a script. It is important to note that this vulnerability only affects systems where an administrator has specifically configured NetworkManager to use dhclient, leaving default configurations unaffected.
Affected Version(s)
Red Hat Enterprise Linux 8 1:1.40.16-21.el8_10
Red Hat Enterprise Linux 8 1:1.40.16-21.el8_10
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 1:1.30.0-19.el8_4.1