CoreDNS is a DNS server that chains plugins. Prior to version 1.14.2, a logical vulnerability in CoreDNS allows DNS access controls to be bypassed due to the de…

CoreDNS DNS server contains a logical vulnerability prior to version 1.14.2 that allows DNS access controls to be bypassed. The vulnerability stems from the default execution order of plugins where security plugins like ACL are evaluated before the rewrite plugin. This creates a Time-of-Check Time-of-Use (TOCTOU) flaw that can be exploited to circumvent access controls. The issue has been addressed in CoreDNS version 1.14.2.