Improper authentication in cURL - CVE-2025-15224

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU121030

Improper authentication in cURL - CVE-2025-15224

Published: January 7, 2026


Vulnerability identifier: #VU121030
CSH Severity: Low
CVSS v4 BT: 0.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2025-15224
CWE-ID: CWE-287
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error when doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication. In such case the curl would wrongly still ask and authenticate using a locally running SSH agent.

Note, the vulnerability affects libcurl builds that use libssh backend instead of libssh2. 



Affected software

cURL
SecurityCenter
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Ubuntu
Basesystem Module
openSUSE Leap
openEuler
Anolis OS
Nessus Network Monitor
LANTIME Operating System Firmware (LTOS)
curl (Ubuntu package)
curl-debuginfo
curl
curl-debugsource
libcurl
libcurl-devel
curl-help
curl-minimal
curl-doc
libcurl-minimal
libcurl4-debuginfo
libcurl4
libcurl-devel-32bit
curl-mini-debugsource
libcurl-mini4
libcurl-mini4-debuginfo
curl-zsh-completion
curl-fish-completion
libcurl-devel-doc
libcurl4-32bit-debuginfo
libcurl4-32bit
libcurl4-64bit-debuginfo
libcurl4-64bit
libcurl-devel-64bit

How to mitigate CVE-2025-15224

Install updates from vendor's website.

cURL - update to 8.18.0
SecurityCenter - addressed in versions SC-202602.1, SC-202602.2
Nessus Network Monitor - update to 6.5.3
LANTIME Operating System Firmware (LTOS) - update to 7.10.008
curl (Ubuntu package) - addressed in versions 7.35.0-1ubuntu2.20+esm19, 7.47.0-1ubuntu2.19+esm15, 7.58.0-2ubuntu3.24+esm7, 7.68.0-1ubuntu2.25+esm2, 7.81.0-1ubuntu1.22, 8.5.0-2ubuntu10.7, 8.14.1-2ubuntu1.1
curl-debuginfo - addressed in versions 7.71.1-45, 7.79.1-46, 8.4.0-26
curl - addressed in versions 7.71.1-45, 7.79.1-46, 8.4.0-26
curl-debugsource - addressed in versions 7.71.1-45, 7.79.1-46, 8.4.0-26
libcurl - addressed in versions 7.71.1-45, 7.79.1-46, 8.4.0-26
libcurl-devel - addressed in versions 7.71.1-45, 7.79.1-46, 8.4.0-26
curl-help - addressed in versions 7.71.1-45, 7.79.1-46, 8.4.0-26
curl-minimal - update to 8.4.0-13
curl - update to 8.4.0-13
curl-doc - update to 8.4.0-13
libcurl-minimal - update to 8.4.0-13
libcurl-devel - update to 8.4.0-13
libcurl - update to 8.4.0-13
libcurl4-debuginfo - addressed in versions 8.14.1-150200.4.97.1, 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1, 8.14.1-150700.7.8.1
curl - addressed in versions 8.14.1-150200.4.97.1, 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1, 8.14.1-150700.7.8.1
curl-debugsource - addressed in versions 8.14.1-150200.4.97.1, 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1, 8.14.1-150700.7.8.1
curl-debuginfo - addressed in versions 8.14.1-150200.4.97.1, 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1, 8.14.1-150700.7.8.1
libcurl4 - addressed in versions 8.14.1-150200.4.97.1, 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1, 8.14.1-150700.7.8.1
libcurl-devel-32bit - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1
curl-mini-debugsource - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1
libcurl-mini4 - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1
libcurl-mini4-debuginfo - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1
libcurl-devel - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1, 8.14.1-150700.7.8.1
curl-zsh-completion - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1
curl-fish-completion - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1
libcurl-devel-doc - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1
libcurl4-32bit-debuginfo - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1, 8.14.1-150700.7.8.1
libcurl4-32bit - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1, 8.14.1-150700.7.8.1
libcurl4-64bit-debuginfo - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1
libcurl4-64bit - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1
libcurl-devel-64bit - addressed in versions 8.14.1-150400.5.77.1, 8.14.1-150600.4.34.1

External References

Related Security Bulletins