CVE-2026-101277

Name of the Vulnerable Software and Affected Versions OpenDKIM versions prior to 2.11.1

Description A security flaw exists in the Tag Tokenizer component within the dkim process set() function of the dkim.c file. A remote attacker can perform a manipulation that results in the use of a less trusted source.

Recommendations As a temporary workaround, consider restricting the use of the dkim process set() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.