CVE-2026-71194: Medium severity Openstack Designate vulnerability
In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When two zones with the same name exist across different pools, the lookup fails with a deterministic error, causing the handler to return REFUSED for all DNS queries through that path. The handlenotify path is exploitable via a single unauthenticated UDP packet. This is independently reachable through the cross-tenant zone overlap described in a different recent CVE, and also affects legitimate same-tenant cross-pool configurations. BIND9 views do not mitigate this issue as mDNS is a shared service upstream of any view configuration.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-71194?
CVE-2026-71194 has a medium severity rating of 6.8.
How do I fix CVE-2026-71194?
The vulnerability can be fixed by upgrading to OpenStack Designate version 22.0.2 or later.
What impact can CVE-2026-71194 have on my system?
CVE-2026-71194 can cause DNS queries to be consistently refused if there are two zones with the same name across different pools.
Which version of OpenStack is affected by CVE-2026-71194?
OpenStack Designate versions prior to 22.0.2 are affected by CVE-2026-71194.
Is CVE-2026-71194 a remote vulnerability?
Yes, CVE-2026-71194 can be exploited remotely as the issue is related to DNS queries.