CVE-2026-94266

A flaw was found in curl. This vulnerability can lead to information disclosure by inadvertently revealing authentication credentials. When curl retrieves credentials from a local configuration file (such as a .netrc file), requesting the effective URL metadata can cause the returned destination address to improperly include those secret credentials. A local user may exploit this issue to view sensitive authentication tokens if an application or script queries and logs or displays the resolved URL.

Red Hat has evaluated this vulnerability as having a Low security impact because exposure is limited to local scenarios where authentication secrets are sourced from a user configuration file and an application or script explicitly queries the effective URL metadata. Under standard configurations, curl and libcurl do not expose stored authentication tokens unless an application or script intentionally requests the resolved destination address. Exploitation requires existing local execution access alongside this specific query pattern, presenting minimal risk to typical system operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.