Connection Reuse Vulnerability in libcurl for SMB Transfers

CVE-2026-5773

What is CVE-2026-5773?

libcurl may incorrectly reuse an established connection during SMB file transfers due to a logical error in its code. This flaw allows for the potential mixing of file uploads and downloads between different shares on the same server. As a result, an application might inadvertently download the wrong file or upload a file to an unintended location, while using the same set of credentials and the same server context. This presents significant risks for data integrity and confidentiality in networked environments.

References