Threats affecting pkg:github/gnome/network-manager-iodine

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8	EPSS 0.1%	CVE-2026-91837GNOME NetworkManager-iodine · OS Command Injection High7.8EPSS 0.1%2026-09-25CVE Database V5CVE-2026-91837 CVE-2026-91837 is a local privilege escalation vulnerability in NetworkManager-iodine, a VPN plugin for NetworkManager. It arises from improper neutralization of special shell characters in the 'nameserver' setting, allowing a local unprivileged user to inject OS commands. These commands execute with root privileges before the application drops elevated permissions, enabling arbitrary command execution as root. EPSS 0.1%Vulnerability	CVE Database V5	2026-09-25

Page 1 of 1