Skip to content
fr Sign in
8.1 High

CVE-2026-107929 When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes…

Description

When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that binding is not part of the connection reuse key, so a later transfer asking for a different source can silently reuse an existing connection and go out from the earlier transfer's source address

Affected products and versions

Product Affected versions Fixed in
curl 8.22.0 No fix stated
curl 8.21.0 No fix stated
curl 8.20.0 No fix stated
curl 8.19.0 No fix stated
curl 8.18.0 No fix stated
curl 8.17.0 No fix stated
curl 8.16.0 No fix stated
curl 8.15.0 No fix stated
curl 8.14 8.14.0 → 8.14.1 No fix stated
Show the 5 other branches
Product Affected versions Fixed in
curl 8.13.0 No fix stated
curl 8.12 8.12.0 → 8.12.1 No fix stated
curl 8.11 8.11.0 → 8.11.1 No fix stated
curl 8.10 8.10.0 → 8.10.1 No fix stated
curl 8.9 8.9.0 → 8.9.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of curl

The 98 CVEs of curl →
CVE-2026-107928 When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer 8.1 High CVE-2026-94266 libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing… 7.5 High CVE-2026-94265 When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might… 9.1 Critical CVE-2026-92391 A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal… 7.5 High
Track this CVE