When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances.
中危 CVSS 5.3
摘要
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://curl.se/docs/CVE-2026-6429.html Patch
- https://curl.se/docs/CVE-2026-6429.json Product
- https://hackerone.com/reports/3677759 Exploit
时间线
- nvd_ingest NVD