Nixpkgs security tracker

Untriaged

Permalink CVE-2025-9615

created 2 months, 2 weeks ago

Networkmanager: networkmanager file access

A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.

References

https://access.redhat.com/security/cve/CVE-2025-9615 vdb-entryx_refsource_REDHAT
RHBZ#2391503 x_refsource_REDHATissue-tracking
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1809
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2…
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2…

Affected products

NetworkManager

Matching in nixpkgs

pkgs.networkmanager

Network configuration and management tool

nixos-unstable 1.52.1
- nixpkgs-unstable 1.52.1
- nixos-unstable-small 1.52.1
nixos-25.11 1.54.3
- nixpkgs-25.11-darwin 1.54.3

pkgs.networkmanager-ssh

SSH VPN integration for NetworkManager

nixos-25.11 1.4.2
- nixpkgs-25.11-darwin 1.4.2

pkgs.networkmanager-l2tp

L2TP plugin for NetworkManager

nixos-unstable l2tp-gnome-1.20.20
- nixpkgs-unstable l2tp-gnome-1.20.20
- nixos-unstable-small l2tp-gnome-1.20.20
nixos-25.11 l2tp-gnome-1.20.20
- nixpkgs-25.11-darwin l2tp-gnome-1.20.20

pkgs.networkmanager-sstp

NetworkManager's sstp plugin

nixos-unstable 1.3.2
- nixpkgs-unstable 1.3.2
- nixos-unstable-small 1.3.2
nixos-25.11 1.3.2
- nixpkgs-25.11-darwin 1.3.2

pkgs.networkmanager-vpnc

NetworkManager's VPNC plugin

nixos-unstable 1.4.0
- nixpkgs-unstable 1.4.0
- nixos-unstable-small 1.4.0
nixos-25.11 1.4.0
- nixpkgs-25.11-darwin 1.4.0

pkgs.networkmanager_dmenu

Small script to manage NetworkManager connections with dmenu instead of nm-applet

nixos-unstable 2.6.1
- nixpkgs-unstable 2.6.1
- nixos-unstable-small 2.6.1
nixos-25.11 2.6.2
- nixpkgs-25.11-darwin 2.6.2

pkgs.networkmanager-iodine

NetworkManager's iodine plugin

nixos-unstable 1.2.0-unstable-2024-11-02
- nixpkgs-unstable 1.2.0-unstable-2024-11-02
- nixos-unstable-small 1.2.0-unstable-2024-11-02
nixos-25.11 1.2.0-unstable-2025-10-11
- nixpkgs-25.11-darwin 1.2.0-unstable-2025-10-11

pkgs.networkmanager-openvpn

NetworkManager's OpenVPN plugin

nixos-unstable 1.12.0
- nixpkgs-unstable 1.12.0
- nixos-unstable-small 1.12.0
nixos-25.11 1.12.3
- nixpkgs-25.11-darwin 1.12.3

pkgs.networkmanager_strongswan

NetworkManager's strongswan plugin

nixos-unstable 1.6.2
- nixpkgs-unstable 1.6.2
- nixos-unstable-small 1.6.2
nixos-25.11 1.6.4
- nixpkgs-25.11-darwin 1.6.4

pkgs.networkmanager-fortisslvpn

NetworkManager’s FortiSSL plugin

nixos-unstable 1.4.0
- nixpkgs-unstable 1.4.0
- nixos-unstable-small 1.4.0
nixos-25.11 1.4.0
- nixpkgs-25.11-darwin 1.4.0

pkgs.networkmanager-openconnect

NetworkManager’s OpenConnect plugin

nixos-unstable 1.2.10
- nixpkgs-unstable 1.2.10
- nixos-unstable-small 1.2.10
nixos-25.11 1.2.10
- nixpkgs-25.11-darwin 1.2.10

pkgs.libsForQt5.networkmanager-qt

None

nixos-unstable 5.116.0
- nixpkgs-unstable 5.116.0
- nixos-unstable-small 5.116.0

pkgs.kdePackages.networkmanager-qt

Qt wrapper for NetworkManager API.

nixos-unstable 6.16.0
- nixpkgs-unstable 6.17.0
- nixos-unstable-small 6.17.0
nixos-25.11 6.20.0
- nixpkgs-25.11-darwin 6.20.0

pkgs.plasma5Packages.networkmanager-qt

None

nixos-unstable 5.116.0
- nixpkgs-unstable 5.116.0
- nixos-unstable-small 5.116.0

pkgs.python312Packages.sdbus-networkmanager

Python-sdbus binds for NetworkManager

nixos-unstable 2.0.0
- nixpkgs-unstable 2.0.0
- nixos-unstable-small 2.0.0
nixos-25.11 2.0.0
- nixpkgs-25.11-darwin 2.0.0

pkgs.python313Packages.sdbus-networkmanager

Python-sdbus binds for NetworkManager

nixos-unstable 2.0.0
- nixpkgs-unstable 2.0.0
- nixos-unstable-small 2.0.0
nixos-25.11 2.0.0
- nixpkgs-25.11-darwin 2.0.0

pkgs.haskellPackages.amazonka-networkmanager

Amazon Network Manager SDK

nixos-unstable 2.0
- nixpkgs-unstable 2.0
- nixos-unstable-small 2.0
nixos-25.11 2.0-unstable-2025-04-16
- nixpkgs-25.11-darwin 2.0-unstable-2025-04-16