ALPINE-CVE-2026-86413

ALPINE-CVE-2026-86413

This page contains facts from public vulnerability sources. Check the original advisory before updating.

When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there.

Fix available

Published

2026-10-20T20:17:25.787Z

Updated

2026-10-25T16:30:04.023684102Z

Stack: system

Check your server →