We have updated Unbound to version 1.24.2 to address CVE-2025-11411. This fix mitigates a potential domain hijacking attack involving YXDOMAIN and non-referral nodata answers. We thank TaoFei Guo (Peking University), Yang Luo, and JianJun Chen (Tsinghua University) for reporting this issue.
Critical update for Unbound fixing CVE-2025-11411 (Domain Hijacking vulnerability).