CVE-2026-19685
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.
Risk Assessment
A local user can intercept network credentials, potentially leading to unauthorized access to the corporate network and data theft.
Recommendation
Apply the vendor's patch that fully fixes CVE-2025-9615, and consider restricting access to network connection configuration.
Other vulnerabilities in NetworkManager
See all- CVE-2026-10805Medium
A vulnerability in NetworkManager allows local privilege escalation through processing malformed MUD URLs in the dhclient backend. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.
- CVE-2025-9615Low
A flaw in NetworkManager allows non-root users to access files owned by other users when configuring the network. The daemon runs with root privileges and can read files belonging to users other than the one who added the connection.
Original NVD description (English source)
NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise (802.1X) connection profile's CA path at an attacker-controlled directory, bypassing server certificate validation and enabling credential theft via a rogue access point.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS