{"id":"CVE-2026-107929","title":"curl: curl: local interface connection reuse mixup (CVE-2026-107929)","summary":"A flaw was found in curl. When connection pooling is used with forced local interface binding options, curl fails to include the source interface configuration in its connection reuse cache. An attacker able to initiate network requests in…","severity":"low","cvss":3.7,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvssSource":"vendor","cwe":"CWE-488","vendor":"Red Hat","product":"Red Hat Hardened Images","affected":["enterprise_linux 10","jboss_core_services","satellite 6","hardened_images"],"patched":["hardened_images"],"published":"2026-10-14","updated":"2026-10-23","sourceUpdated":"2026-10-23T00:38:21+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-107929.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-107929.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-107929"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550721"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107929"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107929"},{"url":"https://access.redhat.com/errata/RHSA-2026:82895"},{"url":"https://curl.se/docs/CVE-2026-107929.json","label":"json"},{"url":"https://curl.se/docs/CVE-2026-107929.html","label":"www"},{"url":"https://hackerone.com/reports/4099618","label":"issue"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00239,"epssPercentile":0.14957,"ingestedAt":"2026-10-20T21:19:21.269Z","slug":"CVE-2026-107929","body":"## Overview\n\nA flaw was found in curl. When connection pooling is used with forced local interface binding options, curl fails to include the source interface configuration in its connection reuse cache. An attacker able to initiate network requests in an application using pooled connections can cause subsequent transfers to inadvertently reuse an existing connection. This behavior causes outbound network traffic to be transmitted through the wrong source address, potentially routing requests through an unintended network interface.\n\n## Vendor advisories\n\n- **RHSA-2026:82895** · Red Hat · fixed in: Red Hat Hardened Images · released 2026-10-14 · [advisory](https://access.redhat.com/errata/RHSA-2026:82895)\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 10, Red Hat JBoss Core Services, Red Hat Satellite 6 · no fix planned: Red Hat JBoss Core Services, Red Hat Satellite 6, Red Hat Enterprise Linux 10 · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-107929.json)\n\n**curl: curl: local interface connection reuse mixup** — rated Low by Red Hat. Released 2026-10-14, updated 2026-10-23.\n\nAffected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat JBoss Core Services\n- Red Hat Satellite 6\n\nFixed:\n\n- Red Hat Hardened Images\n\nNo fix planned:\n\n- Red Hat JBoss Core Services\n- Red Hat Satellite 6\n- Red Hat Enterprise Linux 10\n\nNot affected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat Hardened Images\n- Red Hat Satellite 6\n\n## Remediation\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/ https://access.redhat.com/errata/RHSA-2026:82895","depth":"sunlit","depthScore":20,"depthScoreParts":{"impact":20.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":228236,"id":"CVE-2026-107929","ts":1792758223817,"field":"cvss","old":null,"new":"3.7"},{"seq":228235,"id":"CVE-2026-107929","ts":1792758223817,"field":"severity","old":"none","new":"low"}]}