CVE-2026-107929

A flaw was found in curl. When connection pooling is used with forced local interface binding options, curl fails to include the source interface configuration in its connection reuse cache. An attacker able to initiate network requests in an application using pooled connections can cause subsequent transfers to inadvertently reuse an existing connection. This behavior causes outbound network traffic to be transmitted through the wrong source address, potentially routing requests through an unintended network interface.

This vulnerability is rated as Low severity because exploiting it requires an uncommon non-default configuration combining connection pooling with specific network interface binding prefixes, limiting the scope of unauthorized network traffic egress. In typical Red Hat environments, applications rarely bind transfers to dedicated local interfaces using forced interface prefixes across pooled connections. Even when triggered, the flaw only causes subsequent requests to route through a previously established source interface rather than permitting arbitrary data tampering or remote code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.