CVE-2025-9615

N/A

Description

A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.

CVE Details

CVSS v3.1 ScoreN/A

Published1/26/2026

Last Modified1/27/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-281

References

https://access.redhat.com/security/cve/CVE-2025-9615(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=2391503(secalert@redhat.com)

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1809(secalert@redhat.com)

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2324(secalert@redhat.com)

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2327(secalert@redhat.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.