curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)

Description

A vulnerability classified as problematic has been found in curl_cffi. Affected is an unknown function. The manipulation leads to open redirect. This vulnerability is uniquely identified as CVE-2026-33752. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

Affected Products

References

• https://github.com/advisories/GHSA-qw2m-4pqf-rmpp(advisory)
• https://github.com/lexiforest/curl_cffi/security/advisories/GHSA-qw2m-4pqf-rmpp
• https://github.com/advisories/GHSA-qw2m-4pqf-rmpp

Related News (1 articles)