CyberRota Analysis
AI-GeneratedA vulnerability exists in the NetworkManager-vpnc VPN plugin that allows local unprivileged users to inject a newline character into the CA-File path, enabling them to execute arbitrary commands with root privileges. This local privilege escalation poses a significant security risk, particularly for environments where untrusted users have access to the system. Organizations utilizing NetworkManager-vpnc should prioritize patching this flaw to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege escalation.