SSH Host Verification Flaw in Curl Command Line Tool from Curl

CVE-2026-86410

What is CVE-2026-86410?

A logical flaw exists in the Curl command line tool that impacts SSH host verification. This issue arises when using SFTP or SCP, where the tool fails to enforce host verification options if a redirect is followed. This behavior can potentially expose users to security risks during file transfers through these protocols.

References