p PatchFirst

CVE-2026-91837

CVE-2026-91837 · Networkmanager-iodine: networkmanager-iodine: local privilege escalation to root via nameserver option injection

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine VPN connection. By embedding shell metacharacters (special characters that can execute commands) in the 'nameserver' value, an attacker can inject and execute arbitrary commands. These commands run with root privileges before the application drops its elevated permissions, leading to local privilege escalation.

CVSS 7.8 · High · EPSS 0.1%

Published
Updated

Stack: system

Affected products and versions

  • networkmanager-iodine

    Versions
    • ≥ 0: Affected (semver)

    No fix published

  • network-manager-iodine Debian:12

    Versions
    • 1.2.0-3.2
    • 1.2.0-3.3
    • 1.2.0-3.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • network-manager-iodine Debian:13

    Versions
    • 1.2.0-3.3
    • 1.2.0-3.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • network-manager-iodine Ubuntu:16.04:LTS

    Versions
    • 0.0.5-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • network-manager-iodine Ubuntu:18.04:LTS

    Versions
    • 1.2.0-1
    • 1.2.0-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • network-manager-iodine Ubuntu:20.04:LTS

    Versions
    • 1.2.0-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • network-manager-iodine Ubuntu:22.04:LTS

    Versions
    • 1.2.0-3ubuntu1
    • 1.2.0-3.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • network-manager-iodine Ubuntu:24.04:LTS

    Versions
    • 1.2.0-3.2
    • 1.2.0-3.3
    • 1.2.0-3.3build1
    • 1.2.0-3.3build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • network-manager-iodine Ubuntu:26.10

    Versions
    • 1.2.0-3.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • network-manager-iodine Ubuntu:26.04:LTS

    Versions
    • 1.2.0-3.3build2
    • 1.2.0-3.3build3
    • 1.2.0-3.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →