What’s Vulnerable › Vulnerabilities

CVE-2026-61477: Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection

• Severity: low (CVSS 2.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-07 · updated 2026-08-14
• Weakness: CWE-93

Description

An injection vulnerability was found in libvirt's virtual network driver. The network XML parser does not strip newline characters from DNS TXT record value attributes and SRV record domain/target attributes. These values are written verbatim into the dnsmasq configuration file generated by the network driver, allowing a user with permission to define virtual networks to inject arbitrary dnsmasq configuration directives such as dhcp-script, leading to arbitrary command execution as root.

Affected products

• Red Hat Enterprise Linux 10: all versions
• Red Hat Enterprise Linux 6: all versions
• Red Hat Enterprise Linux 7: all versions
• Red Hat Enterprise Linux 8: all versions
• Red Hat Enterprise Linux 9: all versions
• Red Hat Enterprise Linux for NVIDIA 26: all versions

References

• https://access.redhat.com/security/cve/CVE-2026-61477
• https://bugzilla.redhat.com/show_bug.cgi?id=2512066
• https://gitlab.com/libvirt/libvirt/-/commit/3cfc77963b512d809348fca07f97fe924fac9a05

Get alerted when CVE-2026-61477 or the next vulnerability affects your stack