incomplete mTLS config matching in conn reuse
Published Jul 3, 2026
7.5
HIGHCVSS 3.1
EPSS 0.40%
Description
libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse.
libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, some TLS settings related to client certificates were left out from the configuration match checks, making them match too easily. In particular options related to the private key.
Affected products
-
- Version 7.10StatusaffectedConstraints-
- Version 7.10.1StatusaffectedConstraints-
- Version 7.10.2StatusaffectedConstraints-
- Version 7.10.3StatusaffectedConstraints-
- Version 7.10.4StatusaffectedConstraints-
- Version 7.10.5StatusaffectedConstraints-
- Version 7.10.6StatusaffectedConstraints-
- Version 7.10.7StatusaffectedConstraints-
- Version 7.10.8StatusaffectedConstraints-
- Version 7.11.0StatusaffectedConstraints-
- Version 7.11.1StatusaffectedConstraints-
- Version 7.11.2StatusaffectedConstraints-
- Version 7.12.0StatusaffectedConstraints-
- Version 7.12.1StatusaffectedConstraints-
- Version 7.12.2StatusaffectedConstraints-
- Version 7.12.3StatusaffectedConstraints-
- Version 7.13.0StatusaffectedConstraints-
- Version 7.13.1StatusaffectedConstraints-
- Version 7.13.2StatusaffectedConstraints-
- Version 7.14.0StatusaffectedConstraints-
- Version 7.14.1StatusaffectedConstraints-
- Version 7.15.0StatusaffectedConstraints-
- Version 7.15.1StatusaffectedConstraints-
- Version 7.15.2StatusaffectedConstraints-
- Version 7.15.3StatusaffectedConstraints-
- Version 7.15.4StatusaffectedConstraints-
- Version 7.15.5StatusaffectedConstraints-
- Version 7.16.0StatusaffectedConstraints-
- Version 7.16.1StatusaffectedConstraints-
- Version 7.16.2StatusaffectedConstraints-
- Version 7.16.3StatusaffectedConstraints-
- Version 7.16.4StatusaffectedConstraints-
- Version 7.17.0StatusaffectedConstraints-
- Version 7.17.1StatusaffectedConstraints-
- Version 7.18.0StatusaffectedConstraints-
- Version 7.18.1StatusaffectedConstraints-
- Version 7.18.2StatusaffectedConstraints-
- Version 7.19.0StatusaffectedConstraints-
- Version 7.19.1StatusaffectedConstraints-
- Version 7.19.2StatusaffectedConstraints-
- Version 7.19.3StatusaffectedConstraints-
- Version 7.19.4StatusaffectedConstraints-
- Version 7.19.5StatusaffectedConstraints-
- Version 7.19.6StatusaffectedConstraints-
- Version 7.19.7StatusaffectedConstraints-
- Version 7.20.0StatusaffectedConstraints-
- Version 7.20.1StatusaffectedConstraints-
- Version 7.21.0StatusaffectedConstraints-
- Version 7.21.1StatusaffectedConstraints-
- Version 7.21.2StatusaffectedConstraints-
- Version 7.21.3StatusaffectedConstraints-
- Version 7.21.4StatusaffectedConstraints-
- Version 7.21.5StatusaffectedConstraints-
- Version 7.21.6StatusaffectedConstraints-
- Version 7.21.7StatusaffectedConstraints-
- Version 7.22.0StatusaffectedConstraints-
- Version 7.23.0StatusaffectedConstraints-
- Version 7.23.1StatusaffectedConstraints-
- Version 7.24.0StatusaffectedConstraints-
- Version 7.25.0StatusaffectedConstraints-
- Version 7.26.0StatusaffectedConstraints-
- Version 7.27.0StatusaffectedConstraints-
- Version 7.28.0StatusaffectedConstraints-
- Version 7.28.1StatusaffectedConstraints-
- Version 7.29.0StatusaffectedConstraints-
- Version 7.30.0StatusaffectedConstraints-
- Version 7.31.0StatusaffectedConstraints-
- Version 7.32.0StatusaffectedConstraints-
- Version 7.33.0StatusaffectedConstraints-
- Version 7.34.0StatusaffectedConstraints-
- Version 7.35.0StatusaffectedConstraints-
- Version 7.36.0StatusaffectedConstraints-
- Version 7.37.0StatusaffectedConstraints-
- Version 7.37.1StatusaffectedConstraints-
- Version 7.38.0StatusaffectedConstraints-
- Version 7.39.0StatusaffectedConstraints-
- Version 7.40.0StatusaffectedConstraints-
- Version 7.41.0StatusaffectedConstraints-
- Version 7.42.0StatusaffectedConstraints-
- Version 7.42.1StatusaffectedConstraints-
- Version 7.43.0StatusaffectedConstraints-
- Version 7.44.0StatusaffectedConstraints-
- Version 7.45.0StatusaffectedConstraints-
- Version 7.46.0StatusaffectedConstraints-
- Version 7.47.0StatusaffectedConstraints-
- Version 7.47.1StatusaffectedConstraints-
- Version 7.48.0StatusaffectedConstraints-
- Version 7.49.0StatusaffectedConstraints-
- Version 7.49.1StatusaffectedConstraints-
- Version 7.50.0StatusaffectedConstraints-
- Version 7.50.1StatusaffectedConstraints-
- Version 7.50.2StatusaffectedConstraints-
- Version 7.50.3StatusaffectedConstraints-
- Version 7.51.0StatusaffectedConstraints-
- Version 7.52.0StatusaffectedConstraints-
- Version 7.52.1StatusaffectedConstraints-
- Version 7.53.0StatusaffectedConstraints-
- Version 7.53.1StatusaffectedConstraints-
- Version 7.54.0StatusaffectedConstraints-
- Version 7.54.1StatusaffectedConstraints-
- Version 7.55.0StatusaffectedConstraints-
- Version 7.55.1StatusaffectedConstraints-
- Version 7.56.0StatusaffectedConstraints-
- Version 7.56.1StatusaffectedConstraints-
- Version 7.57.0StatusaffectedConstraints-
- Version 7.58.0StatusaffectedConstraints-
- Version 7.59.0StatusaffectedConstraints-
- Version 7.60.0StatusaffectedConstraints-
- Version 7.61.0StatusaffectedConstraints-
- Version 7.61.1StatusaffectedConstraints-
- Version 7.62.0StatusaffectedConstraints-
- Version 7.63.0StatusaffectedConstraints-
- Version 7.64.0StatusaffectedConstraints-
- Version 7.64.1StatusaffectedConstraints-
- Version 7.65.0StatusaffectedConstraints-
- Version 7.65.1StatusaffectedConstraints-
- Version 7.65.2StatusaffectedConstraints-
- Version 7.65.3StatusaffectedConstraints-
- Version 7.66.0StatusaffectedConstraints-
- Version 7.67.0StatusaffectedConstraints-
- Version 7.68.0StatusaffectedConstraints-
- Version 7.69.0StatusaffectedConstraints-
- Version 7.69.1StatusaffectedConstraints-
- Version 7.7StatusaffectedConstraints-
- Version 7.7.0StatusaffectedConstraints<8.14.2
- Version 7.7.1StatusaffectedConstraints-
- Version 7.7.2StatusaffectedConstraints-
- Version 7.7.3StatusaffectedConstraints-
- Version 7.70.0StatusaffectedConstraints-
- Version 7.71.0StatusaffectedConstraints-
- Version 7.71.1StatusaffectedConstraints-
- Version 7.72.0StatusaffectedConstraints-
- Version 7.73.0StatusaffectedConstraints-
- Version 7.74.0StatusaffectedConstraints-
- Version 7.75.0StatusaffectedConstraints-
- Version 7.76.0StatusaffectedConstraints-
- Version 7.76.1StatusaffectedConstraints-
- Version 7.77.0StatusaffectedConstraints-
- Version 7.78.0StatusaffectedConstraints-
- Version 7.79.0StatusaffectedConstraints-
- Version 7.79.1StatusaffectedConstraints-
- Version 7.8StatusaffectedConstraints-
- Version 7.8.1StatusaffectedConstraints-
- Version 7.80.0StatusaffectedConstraints-
- Version 7.81.0StatusaffectedConstraints-
- Version 7.82.0StatusaffectedConstraints-
- Version 7.83.0StatusaffectedConstraints-
- Version 7.83.1StatusaffectedConstraints-
- Version 7.84.0StatusaffectedConstraints-
- Version 7.85.0StatusaffectedConstraints-
- Version 7.86.0StatusaffectedConstraints-
- Version 7.87.0StatusaffectedConstraints-
- Version 7.88.0StatusaffectedConstraints-
- Version 7.88.1StatusaffectedConstraints-
- Version 7.9StatusaffectedConstraints-
- Version 7.9.1StatusaffectedConstraints-
- Version 7.9.2StatusaffectedConstraints-
- Version 7.9.3StatusaffectedConstraints-
- Version 7.9.4StatusaffectedConstraints-
- Version 7.9.5StatusaffectedConstraints-
- Version 7.9.6StatusaffectedConstraints-
- Version 7.9.7StatusaffectedConstraints-
- Version 7.9.8StatusaffectedConstraints-
- Version 8.0.0StatusaffectedConstraints-
- Version 8.0.1StatusaffectedConstraints-
- Version 8.1.0StatusaffectedConstraints-
- Version 8.1.1StatusaffectedConstraints-
- Version 8.1.2StatusaffectedConstraints-
- Version 8.10.0StatusaffectedConstraints-
- Version 8.10.1StatusaffectedConstraints-
- Version 8.11.0StatusaffectedConstraints-
- Version 8.11.1StatusaffectedConstraints-
- Version 8.12.0StatusaffectedConstraints-
- Version 8.12.1StatusaffectedConstraints-
- Version 8.13.0StatusaffectedConstraints-
- Version 8.14.0StatusaffectedConstraints-
- Version 8.14.1StatusaffectedConstraints-
- Version 8.15.0StatusaffectedConstraints<8.16.1
- Version 8.15.0StatusaffectedConstraints-
- Version 8.16.0StatusaffectedConstraints-
- Version 8.17.0StatusaffectedConstraints<8.20.1
- Version 8.17.0StatusaffectedConstraints-
- Version 8.18.0StatusaffectedConstraints-
- Version 8.19.0StatusaffectedConstraints-
- Version 8.2.0StatusaffectedConstraints-
- Version 8.2.1StatusaffectedConstraints-
- Version 8.20.0StatusaffectedConstraints-
- Version 8.3.0StatusaffectedConstraints-
- Version 8.4.0StatusaffectedConstraints-
- Version 8.5.0StatusaffectedConstraints-
- Version 8.6.0StatusaffectedConstraints-
- Version 8.7.0StatusaffectedConstraints-
- Version 8.7.1StatusaffectedConstraints-
- Version 8.8.0StatusaffectedConstraints-
- Version 8.9.0StatusaffectedConstraints-
- Version 8.9.1StatusaffectedConstraints-
- Version
-
- Version StatusaffectedConstraints
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Curl | Curl | unaffected |
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Curl | Curl | unaffected |
|
No data.
Red Hat Enterprise Linux 10
curl-0:8.12.1-4.el10_2.6
Fixed · RHSA-2026:69125
Red Hat Hardened Images
curl-main-8.21.0-0.1.hum1
Fixed · RHSA-2026:29017
Red Hat Hardened Images
rust-main-1.96.1-1.hum1
Fixed · RHSA-2026:34975
Confidential Compute Attestation
build-of-trustee/trustee-rhel9
Under investigation
Confidential Compute Attestation
openshift-sandboxed-containers/osc-podvm-payload-rhel9
Under investigation
Red Hat Enterprise Linux 10
igvm
Affected
Red Hat Enterprise Linux 10
rust
Not affected
Red Hat Enterprise Linux 10
s390utils
Not affected
Red Hat Enterprise Linux 10
snphost
Affected
Red Hat Enterprise Linux 10
trustee
Affected
Red Hat Enterprise Linux 10
trustee-guest-components
Affected
Red Hat Enterprise Linux 6
curl
Out of support scope
Red Hat Enterprise Linux 7
curl
Affected
Red Hat Enterprise Linux 8
curl
Affected
Red Hat Enterprise Linux 8
dotnet8.0
Not affected
Red Hat Enterprise Linux 9
curl
Affected
Red Hat Enterprise Linux 9
rust
Not affected
Red Hat Enterprise Linux 9
snphost
Affected
Red Hat Enterprise Linux 9
trustee-guest-components
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rust
Under investigation
Red Hat OpenShift Container Platform 4
openshift/ose-rhel-coreos-8
Under investigation
Red Hat OpenShift Container Platform 4
openshift/ose-rhel-coreos-9
Under investigation
Red Hat OpenShift Dev Spaces
devspaces/code-rhel9
Under investigation
Red Hat Trusted Profile Analyzer
rhtpa/rhtpa-trustification-service-rhel9
Under investigation
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | curl-0:8.12.1-4.el10_2.6 | Fixed | RHSA-2026:69125 |
| Red Hat Hardened Images | curl-main-8.21.0-0.1.hum1 | Fixed | RHSA-2026:29017 |
| Red Hat Hardened Images | rust-main-1.96.1-1.hum1 | Fixed | RHSA-2026:34975 |
| Confidential Compute Attestation | build-of-trustee/trustee-rhel9 | Under investigation | n/a |
| Confidential Compute Attestation | openshift-sandboxed-containers/osc-podvm-payload-rhel9 | Under investigation | n/a |
| Red Hat Enterprise Linux 10 | igvm | Affected | n/a |
| Red Hat Enterprise Linux 10 | rust | Not affected | n/a |
| Red Hat Enterprise Linux 10 | s390utils | Not affected | n/a |
| Red Hat Enterprise Linux 10 | snphost | Affected | n/a |
| Red Hat Enterprise Linux 10 | trustee | Affected | n/a |
| Red Hat Enterprise Linux 10 | trustee-guest-components | Affected | n/a |
| Red Hat Enterprise Linux 6 | curl | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | curl | Affected | n/a |
| Red Hat Enterprise Linux 8 | curl | Affected | n/a |
| Red Hat Enterprise Linux 8 | dotnet8.0 | Not affected | n/a |
| Red Hat Enterprise Linux 9 | curl | Affected | n/a |
| Red Hat Enterprise Linux 9 | rust | Not affected | n/a |
| Red Hat Enterprise Linux 9 | snphost | Affected | n/a |
| Red Hat Enterprise Linux 9 | trustee-guest-components | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rust | Under investigation | n/a |
| Red Hat OpenShift Container Platform 4 | openshift/ose-rhel-coreos-8 | Under investigation | n/a |
| Red Hat OpenShift Container Platform 4 | openshift/ose-rhel-coreos-9 | Under investigation | n/a |
| Red Hat OpenShift Dev Spaces | devspaces/code-rhel9 | Under investigation | n/a |
| Red Hat Trusted Profile Analyzer | rhtpa/rhtpa-trustification-service-rhel9 | Under investigation | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
This is an Important security feature bypass in libcurl where mTLS connection reuse may occur despite changes to client certificate settings. This could lead to applications using libcurl with mTLS to inadvertently use a less secure connection than intended, potentially compromising data confidentiality or integrity. This issue primarily affects applications that dynamically alter mTLS client certificate configurations and reuse connections.
Red Hat mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
References (7)
- https://access.redhat.com/security/cve/CVE-2026-8932 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2496759 Issue Tracking
- https://curl.se/docs/CVE-2026-8932.html PatchVendor Advisory
- https://curl.se/docs/CVE-2026-8932.json Vendor Advisory
- https://hackerone.com/reports/3733910 exploitIssue TrackingThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-8932
- https://www.cve.org/CVERecord?id=CVE-2026-8932
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2026-8932 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2496759 | Issue Tracking | |
| https://curl.se/docs/CVE-2026-8932.html | PatchVendor Advisory | |
| https://curl.se/docs/CVE-2026-8932.json | Vendor Advisory | |
| https://hackerone.com/reports/3733910 | exploitIssue TrackingThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2026-8932 | ||
| https://www.cve.org/CVERecord?id=CVE-2026-8932 |
Change history (0)
No recorded changes yet.