Proxy Credentials Mismanagement in Curl Affects Network Communication

CVE-2026-6253

What is CVE-2026-6253?

The vulnerability in Curl arises when handling proxies with differing authentication requirements. Specifically, if Curl is configured to utilize different proxies for various URL schemes and the first proxy requires credentials while the second one does not, credentials meant for the first proxy may erroneously be passed to the second during a URL redirection. This mismanagement of proxy credentials can lead to unauthorized access to resources, putting sensitive data at risk.

References