A vulnerability in netfoil before version 0.3.0 allows a local attacker to bypass domain name filters by crafting DNS requests containing multiple questions, where the first question is legitimate. This bypass depends on the attacker's ability to create such requests and the remote DNS-over-HTTPS (DoH) server's support for multiple questions in a single request. The issue is categorized as a moderate severity vulnerability with no known exploits in the wild and no official patch currently available.