NLnet Labs Unbound up to 1.25.1 Unbound Control view_local_data/view_local_datas privileges management

Summaryinfo

A vulnerability was found in NLnet Labs Unbound up to 1.25.1. It has been rated as problematic. The affected element is the function view_local_data/view_local_datas of the component Unbound Control. This manipulation causes privileges management. This vulnerability appears as CVE-2026-55708. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability has been found in NLnet Labs Unbound up to 1.25.1 and classified as problematic. Affected by this vulnerability is the function view_local_data/view_local_datas of the component Unbound Control. The manipulation with an unknown input leads to a privileges management vulnerability. The CWE definition for the vulnerability is CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. As an impact it is known to affect confidentiality. The summary by CVE is:

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and 'view_local_datas' commands of 'unbound-control' create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the control interface omits adding the default-protected zones (e.g., RFC 1918 reverse, AS112 zones, .onion, .localhost). Once the local zone tree exists without the defaults, every query for a default-protected name from a client mapped to that view escapes to the public DNS via the iterator instead of being answered locally, bypassing local policy expectations.

The advisory is shared at nlnetlabs.nl. This vulnerability is known as CVE-2026-55708 since 06/22/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1068 for this issue.

Upgrading to version 1.25.2 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• NLnet Labs

Name

• Unbound

Version

• 1.25.0
• 1.25.1

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion