Skip to content
Threat Feed
Subscribe

Product

NetworkManager-L2tp

1 brief RSS
high advisory

Local Privilege Escalation in NetworkManager-l2tp via pppd Directive Injection

An improper input validation vulnerability in NetworkManager-l2tp (CVE-2026-93337) allows local users with VPN creation permissions to inject malicious directives into the pppd configuration, leading to arbitrary code execution as root.

NetworkManager-l2tp privilege-escalation linux cve
1t 1c