Vulnerability Description
curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.
CVSS Score
4.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Haxx | Curl | >= 7.69.0, < 8.17.0 |
References
- https://curl.se/docs/CVE-2025-10966.htmlVendor AdvisoryPatch
- https://curl.se/docs/CVE-2025-10966.jsonVendor Advisory
- https://hackerone.com/reports/3355218ExploitIssue TrackingThird Party Advisory
- http://www.openwall.com/lists/oss-security/2025/11/05/2Mailing ListThird Party AdvisoryPatch
FAQ
What is CVE-2025-10966?
CVE-2025-10966 is a vulnerability with a CVSS score of 4.3 (MEDIUM). curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and ...
How severe is CVE-2025-10966?
CVE-2025-10966 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-10966?
Check the references section above for vendor advisories and patch information. Affected products include: Haxx Curl.