CVE-2026-7168

MEDIUM5.3

cross-proxy Digest auth state leak

Published May 13, 2026

Modified 3 weeks ago

Details

Successfully using libcurl to do a transfer over a specific HTTP proxy (proxyA) with Digest authentication and then changing the proxy host to a second one (proxyB) for a second transfer, reusing the same handle, makes libcurl wrongly pass on the Proxy-Authorization: header field meant for proxyA, to proxyB.

References

WEB

http://www.openwall.com/lists/oss-security/2026/04/29/14

WEB

https://curl.se/docs/CVE-2026-7168.html

WEB

https://curl.se/docs/CVE-2026-7168.json

DETECTION

https://hackerone.com/reports/3697719

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-7168

CVSS Analysis