Nm-l2tp vulnerabilities
We track 2 vulnerabilities in Nm-l2tp products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 23, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Nm-l2tp vulnerabilities
- 7.8 High severity
NetworkManager-l2tp: Improper Neutralization of Argument Delimiters in a Command
NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN connections to execute arbitrary code as root by injecting pppd options through a crafted VPN username. Att
- 7.8 High severity
NetworkManager-l2tp: Improper Neutralization of Argument Delimiters in a Command
NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing tra