CVE-2026-86415
Published: October 17, 2026Last modified: October 21, 2026
Description
libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this.
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | curl | Not affected (8.1.0-r2) |
| 25 LTS | curl | Not affected (8.14.0-r1) | |
| Stream | curl | Not affected (8.1.2-r0) | |
| Hardened Containers | Stream | curl | Not affected (8.1.2-r0) |