CVE-2020-11091

CVE-2020-11091 affects Weave Net versions prior to 2.6.3, allowing a root-privileged attacker within a container to manipulate host DNS responses and redirect IPv6 traffic. The vulnerability leverages misconfigured IPv6 settings on the host, specifically the acceptance of rogue router advertisements. This can lead to an attacker intercepting host traffic, potentially enabling further escalation if combined with other host vulnerabilities. While rated Medium severity (CVSS 5.8) due to high privileges required and high attack complexity, there is no evidence of active exploitation, public exploit code, or significant community discussion.