CVE-2026-93337

A flaw was found in NetworkManager-l2tp. This improper input validation vulnerability allows local users with permissions to create VPN connections to inject arbitrary directives into the pppd Point-to-Point Protocol Daemon options file. By supplying specially crafted mru or mtu property values, ...