Local Privilege Escalation Flaw in NetworkManager-l2tp VPN Plugin

CVE-2026-19624

What is CVE-2026-19624?

A security flaw in NetworkManager-l2tp allows local unprivileged users to exploit the VPN connection properties settings. Specifically, the plugin writes attacker-controlled values into the generated ipsec.conf file unescaped, enabling an unauthorized user to create a malicious L2TP VPN profile. This profile can contain a newline-injected directive that gets executed as root when the IKE security association is established by pluto. This vulnerability poses significant risks, as it enables local users to escalate their privileges and execute potentially harmful commands in a compromised system.

References