CVE-2026-19624

NetworkManager-l2tp suffers from a local privilege escalation (CVSS 3.1: 7.8 HIGH ) caused by attacker-controlled VPN connection properties (vpn.data and vpn.secrets) being written unescaped into a generated ipsec.conf file. When a local unprivileged user activates a crafted L2TP profile containi...