USN-9053-1: network-manager-ssh vulnerability
Published Nov 11, 2026
·Updated
It was discovered that NetworkManager-ssh did not properly validate extra options in VPN connection settings. A local attacker could possibly use this issue to escalate privileges.
Affected Software
5 affected componentsFixes available
ubuntu/network-manager-ssh<1.2.6-1ubuntu0.1~esm1
1.2.6-1ubuntu0.1~esm1
All of the following
ubuntu/network-manager-ssh<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
All of the following
ubuntu/network-manager-ssh-gnome<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=18.04
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/network-manager-sshto a version that resolves this vulnerability.Fixed in 1.2.6-1ubuntu0.1~esm1
Event History
Nov 11, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Advisory Published
via OSV·06:32 PM
Data Sourced
via OSV·06:32 PM
DescriptionAffected Software
Frequently Asked Questions
1
What level of access would an attacker need to exploit this issue?
An attacker would need local access to the affected system.
2
What is the potential impact of successful exploitation?
A local attacker could possibly escalate privileges.