Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
curl: Malicious Proxy Attack When Changing Proxy Host
published 5 months ago
Summary
A security issue in curl can allow an attacker to use a malicious proxy server if the proxy host is changed. This could lead to unauthorized access to sensitive data. To fix this issue, update to the latest version of curl.
Original advisory text
curl: Fix of CVE-2026-7168
- CVE-2026-7168: clear proxy Digest auth state when CURLOPT_PROXY is
reassigned to a different proxy host on the same easy handle so a stale
Proxy-Authorization header is not replayed to the new proxy
reassigned to a different proxy host on the same easy handle so a stale
Proxy-Authorization header is not replayed to the new proxy
References
Timeline
Published22 May 2026
Updated29 May 2026
First seen29 May 2026
Sources
CLSA-2026-1779372207 · OSV
Track software like this
Free during beta