CVE-2025-10966 — Key Exchange without Entity Authentication in Curl
Severity
4.3MEDIUMNVD
EPSS
0.0%
top 94.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedNov 7
Latest updateNov 11
Description
curl's code for managing SSH connections when SFTP was done using the wolfSSH
powered backend was flawed and missed host verification mechanisms.
This prevents curl from detecting MITM attackers and more.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4
Patches
🔴Vulnerability Details
4GHSA▶
GHSA-5gff-h54g-38r2: curl's code for managing SSH connections when SFTP was done using the wolfSSH
powered backend was flawed and missed host verification mechanisms↗2025-11-07
OSV▶
CVE-2025-10966: curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms↗2025-11-07
OSV▶
CVE-2025-10966: curl's code for managing SSH connections when SFTP was done using the wolfSSH
powered backend was flawed and missed host verification mechanisms↗2025-11-07