REDHAT-BUG-2461204: Medium severity curl libcurl vulnerability
Published Apr 23, 2026
·Updated
A flaw was found in libcurl. An application using libcurl that performs an authenticated HTTP(S) request after a Negotiate-authenticated one to the same host may incorrectly reuse the previous connection. This authentication bypass vulnerability allows the second request to be sent over a connection authenticated with different credentials, potentially leading to unauthorized access or information disclosure.
Affected Software
1 affected component
curl libcurl
Event History
Apr 23, 2026
Data Sourced
via Red Hat·04:48 PM
DescriptionSeverityAffected Software