Flaw in libcurl Allows Improper HTTPS Connection Reuse

CVE-2026-80231

What is CVE-2026-80231?

A flaw in libcurl results in the incorrect reuse of an existing HTTPS connection associated with a specific hostname. This occurs even when using a different Native CA Store setting (CURLSSLOPT_NATIVE_CA) from that of the original connection establishment. As a result, this vulnerability may expose systems to potential security risks by enabling the misuse of trusted connections under varied CA configurations.

References