CVE-2026-6429 — netrc credential leak with reused proxy connection
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certai…
Published: 2026-05-13 · CVSS: 5.3 · CVSS 3.1
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7