Skip to main content
CVE-2026-25541VulnerabilityPublished 07/22/2026Updated 10/12/2026

Security update for nm-configurator

Affects SUSE Product Security Team SUSESource GCVE Database

0

Not known to be exploited · fixed in 40.0.0-r0 : update SUSE Product Security Team SUSE when convenient.

Data as of 10/25/2026, 07:59:04 UTC

Severity
Medium

No CVSS score from NVD or the CNA

Exploitation

Not in CISA KEV, no exploitation reported

EPSS
0.6% chance of exploitation in 30 days – higher than 48% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 40.0.0-r0

What to do

Affected software

ProductAffectedFixed in
CleanStartwasmtimeAffected
  • <40.0.0-r0
  • =40.0.0-r0
Fixed in
  • 40.0.0-r0

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A security update is available in libtree-sitter0_26 version 0.26.8-5.1 which addresses the identified vulnerabilities. Users should apply this update to remediate the security issues. Since a patch is available, upgrading to this fixed version is the recommended mitigation.

Description

Multiple medium severity security issues were addressed in the libtree-sitter0_26 package version 0.26.8-5.1 for openSUSE Tumbleweed, improving the security posture of the nm-configurator component. These vulnerabilities affect earlier versions of the package and have been resolved in the updated release. No CVSS score is provided for these issues.

Impact

The vulnerabilities present in versions of libtree-sitter0_26 prior to 0.26.8-5.1 could potentially be exploited to compromise the security of systems running affected versions of nm-configurator. The issues are rated medium severity, indicating a moderate risk to confidentiality, integrity, or availability if exploited. There are no reports of active exploitation.

References

Community reviews

Loading reviews…