CVE-2026-86413

Description

When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there.

References

https://hackerone.com/reports/3993549

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105279

https://curl.se/docs/CVE-2026-86413.json

https://curl.se/docs/CVE-2026-86413.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS