A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine VPN connection. By embedding shell metacharacters (special characters that can execute commands) in the 'nameserver' value, an attacker can inject and execute arbitrary commands. These commands run with root privileges before the application drops its elevated permissions, leading to local privilege escalation.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5463db437e advisory.

    Fix CVE-2026-91837

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ccf41b012c advisory.

    Fix CVE-2026-91837

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d3a0471c75 advisory.

    Fix CVE-2026-91837

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in NetworkManager-iodine, the iodine VPN plugin for NetworkManager. A local unprivileged     user can exploit a vulnerability in how the 'nameserver' setting is processed when establishing an iodine     VPN connection. By embedding shell metacharacters (special characters that can execute commands) in the     'nameserver' value, an attacker can inject and execute arbitrary commands. These commands run with root     privileges before the application drops its elevated permissions, leading to local privilege escalation.
    (CVE-2026-91837)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
350969	Fedora 44 : NetworkManager-iodine (2026-5463db437e)	Nessus	Fedora Local Security Checks	Local	high
350957	Fedora 45 : NetworkManager-iodine (2026-ccf41b012c)	Nessus	Fedora Local Security Checks	Local	high
350956	Fedora 43 : NetworkManager-iodine (2026-d3a0471c75)	Nessus	Fedora Local Security Checks	Local	high
346565	Linux Distros Unpatched Vulnerability : CVE-2026-91837	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-91837

high

Tenable Plugins

high

high

high

high