CVE-2026-93657

Name of the Vulnerable Software and Affected Versions hickory-resolver versions prior to 0.26.2

Description The software fails to propagate bogus DNSSEC proof states through the Resolver::lookup() and Resolver::lookup ip() APIs, which allows invalid records to be returned as successful results. This issue enables attackers who control the answering zone or are positioned on the network path to have forged DNS records accepted as validated, effectively bypassing DNSSEC authentication checks.

Recommendations Update to version 0.26.2 or later.