This vulnerability in PowerDNS Authoritative arises from insufficient validation of names during AXFR zone transfers, which can allow an attacker to perform command injection. The CVSS 3.1 vector indicates that the attack can be performed remotely over the network without privileges or user interaction, but requires high attack complexity. The impact is limited to integrity compromise without confidentiality or availability impact. Affected versions include 4.9.0 and 5.0.0. No vendor advisory or patch information is currently available.

Successful exploitation could allow an attacker to execute arbitrary commands on the affected system, compromising the integrity of the PowerDNS Authoritative server. There is no indication of confidentiality or availability impact. No known exploits exist in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should consider restricting AXFR access to trusted sources only and monitor for unusual activity related to zone transfers. Avoid exposing vulnerable versions to untrusted networks.