Is CVE-2026-91840 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-91840?

CVE-2026-91840 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-91840

Description

A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when the malicious VPN connection is activated.