Security fixes in kubernetes-dns-node-cache 1.26.8-r6 (CVE-2026-50274)
The kubernetes-dns-node-cache package version 1.26.8-r6 addresses two vulnerabilities including CVE-2026-50274. This vulnerability is classified under CWE-770 and affects versions prior to 1.26.8-r6, including versions less than or equal to 1.24.1 and less than 2.8.1. The issue has been assigned a high severity rating. A patch is available to remediate the vulnerability.
AI Analysis
Technical Summary
CVE-2026-50274 is a security vulnerability in the kubernetes-dns-node-cache package, related to CWE-770 (Allocation of Resources Without Limits or Throttling). The vulnerability affects multiple versions of the package prior to 1.26.8-r6, including versions less than or equal to 1.24.1 and less than 2.8.1. The vulnerability has been assigned a high severity level by the database and a patch is available in version 1.26.8-r6 that fixes this issue along with another vulnerability identified as GHSA-74j5-xf3v-crq8. No known exploits in the wild have been reported.
Potential Impact
The vulnerability could allow improper resource allocation or throttling issues in the kubernetes-dns-node-cache component, potentially impacting availability or stability of the DNS caching service within Kubernetes environments. The high severity rating indicates a significant security risk if left unpatched.
Mitigation Recommendations
Upgrade kubernetes-dns-node-cache to version 1.26.8-r6 or later to apply the official fix for CVE-2026-50274 and the related vulnerability GHSA-74j5-xf3v-crq8. No additional mitigations are specified beyond applying the patch.
Security fixes in kubernetes-dns-node-cache 1.26.8-r6 (CVE-2026-50274)
Description
The kubernetes-dns-node-cache package version 1.26.8-r6 addresses two vulnerabilities including CVE-2026-50274. This vulnerability is classified under CWE-770 and affects versions prior to 1.26.8-r6, including versions less than or equal to 1.24.1 and less than 2.8.1. The issue has been assigned a high severity rating. A patch is available to remediate the vulnerability.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-50274 is a security vulnerability in the kubernetes-dns-node-cache package, related to CWE-770 (Allocation of Resources Without Limits or Throttling). The vulnerability affects multiple versions of the package prior to 1.26.8-r6, including versions less than or equal to 1.24.1 and less than 2.8.1. The vulnerability has been assigned a high severity level by the database and a patch is available in version 1.26.8-r6 that fixes this issue along with another vulnerability identified as GHSA-74j5-xf3v-crq8. No known exploits in the wild have been reported.
Potential Impact
The vulnerability could allow improper resource allocation or throttling issues in the kubernetes-dns-node-cache component, potentially impacting availability or stability of the DNS caching service within Kubernetes environments. The high severity rating indicates a significant security risk if left unpatched.
Mitigation Recommendations
Upgrade kubernetes-dns-node-cache to version 1.26.8-r6 or later to apply the official fix for CVE-2026-50274 and the related vulnerability GHSA-74j5-xf3v-crq8. No additional mitigations are specified beyond applying the patch.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-74j5-xf3v-crq8
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-50274"]
- Ecosystems
- ["Go"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6a58b40468715ace43d67029
Added to database: 07/16/2026, 10:35:48 UTC
Last enriched: 08/15/2026, 00:25:11 UTC
Last updated: 09/01/2026, 10:52:09 UTC
Views: 147
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.