Windows SSPI connection-pool probe can reuse a connection under the wrong user

身份认证 / Authentication Bypass by Spoofing / #3938190

厂商

curl

严重程度

低危

赏金

—

弱点

Authentication Bypass by Spoofing

研究员

@mr4bugs

披露日期

2026-10-26

资产

https://github.com/curl/curl

CVE

—

该报告还没有中文解读。

Summary: A fresh transfer can reuse a keep-alive connection authenticated under another Windows user because the SSPI isolation check trusts a connection ID that a health probe can set.