CVE-2026-33921
Description
A flaw was found in the Npcap driver. The Windows installer for Arc deployed Npcap with insecure default access restrictions, allowing any local user, not just administrators, to access the driver. This vulnerability enables a local user without administrative privileges to capture network traffic, leading to information disclosure from the host and other systems on the same network segment. Additionally, the user can send arbitrary raw packets on that segment.
Statement
Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.
Understanding the Weakness (CWE)
Other
Technical Impact: Varies by Context
The impact of insecure defaults varies widely depending on the functionality that the product controls.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
