DNS Injection Vulnerability in Twisted Framework Affects Python Applications

CVE-2026-83813

What is CVE-2026-83813?

The Twisted framework's DNSDatagramProtocol prior to version 26.10.0rc1 is susceptible to an attack where an attacker can inject forged DNS responses. This occurs when the protocol accepts a UDP DNS response based on a matching transaction ID without confirming the source host and port. This oversight can lead to significant security issues, such as redirecting hostname resolutions and facilitating mail interception, server-side request forgery, or man-in-the-middle attacks. Version 26.10.0rc1 addresses this vulnerability by enhancing the source port randomization for each DNS query.

References