---
id: "CVE-2026-93010"
kind: "vulnerability"
aliases: ["CVE-2026-93010"]
title: "dnsmasq: DHCP leasequery leaks lease records to any local host"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["dhcp", "dnsmasq", "infrastructure", "self-hosted"]
not_affected_if: ["default-config", "leasequery-disabled"]
published_at: "2026-10-29T14:18:00+00:00"
first_seen_at: "2026-10-29T14:25:23+00:00"
updated_at: "2026-10-29T14:26:16+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93010", "first_seen_at": "2026-10-29T14:25:23+00:00"}]
---

# dnsmasq: DHCP leasequery leaks lease records to any local host

When DHCP leasequery is enabled without an allowed source list, dnsmasq does not check who sends the query. A host on the local network can read lease records including assigned addresses, MAC addresses and hostnames.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether leasequery is enabled in the dnsmasq configuration, for example with `grep -i leasequery /etc/dnsmasq.conf /etc/dnsmasq.d/*`
- Check whether any allowed source addresses are listed alongside it
- Check the installed version with `dnsmasq --version`

## Timeline

- 2026-10-29T14:25:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-93010

## From the sources

A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does not check who sent the query. A host on the local network can request DHCP lease records and learn assigned addresses, MAC addresses, hostnames, and related lease metadata. The feature is off unless an administrator turns it on.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_