Is CVE-2025-9615 in the CISA KEV catalog?

No. CVE-2025-9615 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2025-9615?

CVE-2025-9615 has a CVSS v3 base score of 3.3 (LOW).

What is the EPSS score for CVE-2025-9615?

CVE-2025-9615 has an EPSS score of 0.16% (6th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2025-9615?

Upgrade network-manager on debian unstable to 1.54.3-1 or later. Fixes are available for 57 affected products.

CVE & CISA-KEV Catalog

CVE-2025-9615

LOW

3.3

CVSS v3

NVD

Description

A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.

CWE-281

How to fix

Remediation Available

network-managerDebian

Fixed in:1.54.3-1CVE-2025-9615

NetworkManagerRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManagerRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-adslRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-adslRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-adsl-debuginfoRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-adsl-debuginfoRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-bluetoothRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-bluetoothRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-bluetooth-debuginfoRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-bluetooth-debuginfoRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-cloud-setupRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-cloud-setupRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-cloud-setup-debuginfoRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-cloud-setup-debuginfoRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-config-connectivity-redhatRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-config-connectivity-redhatRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-config-serverRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-config-serverRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-debuginfoRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-debuginfoRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-debugsourceRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-debugsourceRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-dispatcher-routing-rulesRed Hat / RHEL

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-dispatcher-routing-rulesRocky

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-initscripts-updownRed Hat / RHEL

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-initscripts-updownRocky

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-libnmRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-libnmRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-libnm-debuginfoRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-libnm-debuginfoRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-libnm-develRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-libnm-develRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-ovsRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-ovsRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-ovs-debuginfoRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-ovs-debuginfoRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-pppRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-pppRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-ppp-debuginfoRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-ppp-debuginfoRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-teamRed Hat / RHEL

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-teamRocky

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-team-debuginfoRocky

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-team-debuginfoRed Hat / RHEL

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-tuiRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-tuiRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-tui-debuginfoRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-tui-debuginfoRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-wifiRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-wifiRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-wifi-debuginfoRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-wifi-debuginfoRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-wwanRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-wwanRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-wwan-debuginfoRocky

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

NetworkManager-wwan-debuginfoRed Hat / RHEL

Fixed in:1:1.56.0-1.el10RHSA-2026:18142

Fixed in:1:1.54.3-2.el9RHSA-2026:18597

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityLow

IntegrityNone

AvailabilityNone

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploit Intelligence

0.16%probability of exploitation in 30 days

6thpercentile

Low risk: more likely to be exploited than 6% of all known CVEs.

References

Other references7

Embed a live status badge for CVE-2025-9615

Markdown

[![CVE-2025-9615](https://tridentstack.com/cve/badge/CVE-2025-9615.svg)](https://tridentstack.com/cve/CVE-2025-9615)

HTML

<a href="https://tridentstack.com/cve/CVE-2025-9615"><img src="https://tridentstack.com/cve/badge/CVE-2025-9615.svg" alt="CVE-2025-9615"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-06-30.