{"id":"UBUNTU-CVE-2026-91838","details":"[profile data reaches root pppd pty shell]","modified":"2026-09-17T13:31:21.744845252Z","published":"2026-09-17T00:00:00Z","upstream":["CVE-2026-91838"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91838"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-91838"},{"type":"REPORT","url":"https://gitlab.gnome.org/GNOME/network-manager-sstp/-/work_items/67"},{"type":"REPORT","url":"https://blogs.gnome.org/mcatanzaro/2026/09/15/privilege-escalation-vulnerabilities-in-networkmanager-plugins/"}],"affected":[{"package":{"name":"network-manager-sstp","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/network-manager-sstp?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.0-0ubuntu1"],"ecosystem_specific":{"binaries":[{"binary_version":"1.3.0-0ubuntu1","binary_name":"network-manager-sstp"},{"binary_name":"network-manager-sstp-gnome","binary_version":"1.3.0-0ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91838.json"}},{"package":{"name":"network-manager-sstp","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/network-manager-sstp?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.1-1","1.3.1-2","1.3.2-1","1.3.2-1build1","1.3.2-1build2"],"ecosystem_specific":{"binaries":[{"binary_version":"1.3.2-1build2","binary_name":"network-manager-sstp"},{"binary_name":"network-manager-sstp-gnome","binary_version":"1.3.2-1build2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91838.json"}},{"package":{"name":"network-manager-sstp","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/network-manager-sstp?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.2-1build5","1.3.2-1build6"],"ecosystem_specific":{"binaries":[{"binary_version":"1.3.2-1build6","binary_name":"network-manager-sstp"},{"binary_name":"network-manager-sstp-gnome","binary_version":"1.3.2-1build6"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91838.json"}}],"schema_version":"1.9.0","severity":[{"type":"Ubuntu","score":"medium"}]}