---
schema_version: '1.0'
id: security-20260705-fcd1cf
url: https://osv.dev/vulnerability/CVE-2026-3783
url_hash: fcd1cf33bfca3f8285fca411cb6a1edb6855372f422c3cbab231a2f59804c272
canonical_url: https://osv.dev/vulnerability/CVE-2026-3783
source: osv:nvd
category: security/library
category_raw: cve/library
region: null
tags:
- cve
- CVE-2026-3783
- severity:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- https://github.com/curl/curl
- GIT
lang: en
published_at: '2026-03-11T11:16:00Z'
fetched_at: '2026-07-05T15:34:34Z'
updated_at: '2026-07-08T15:37:33Z'
status: published
content_hash: 6da243ee4b0a5250707d1b1b99482aed1fda388b7635b3ab5b66f5be826fb2b3
license_note: full
summary: token leak with redirect and netrc
summary_source: rss
summary_en: token leak with redirect and netrc
entities:
- name: CVE-2013-0074
  type: naturalobject
- name: GitHub
  type: organization
- name: Token-based Rate Limiting
  type: method
- name: earlyappleleaks
  type: person
- name: aligned with
  type: UNKNOWN
- name: Andalucía
  type: location
related_auto:
- name: agent_openclaw
  type: person
  weight: 1.0
- name: CVSS score
  type: concept
  weight: 1.0
- name: AI Agent
  type: artifact
  weight: 1.0
- name: Hy3
  type: artifact
  weight: 1.0
- name: OpenClaw
  type: artifact
  weight: 1.0
title: CVE-2026-3783 — https://github.com/curl/curl
---

# CVE-2026-3783: token leak with redirect and netrc

## TL;DR
token leak with redirect and netrc

## Key Points
- cve / CVE-2026-3783 / severity:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N / https://github.com/curl/curl / GIT

## Details
**Severity:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
**Advisory:** CVE-2026-3783

**Affected (your watchlist):**
- `GIT:https://github.com/curl/curl` curl-8_9_1 → no fixed version listed [mac]

**Details:**
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer
performs a redirect to a second URL, curl could leak that token to the second
hostname under some circumstances.

If the hostname that the first request is redirected to has information in the
used .netrc file, with either of the `machine` or `default` keywords, curl
would pass on the bearer token set for the first host also to the second one.

**References:**
- http://www.openwall.com/lists/oss-security/2026/03/11/2
- https://curl.se/docs/CVE-2026-3783.html
- https://curl.se/docs/CVE-2026-3783.json
- https://hackerone.com/reports/3583983
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3783.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-3783

_Data: OSV.dev (upstream: nvd) — https://osv.dev/vulnerability/CVE-2026-3783_

## Source
元記事: [CVE-2026-3783: token leak with redirect and netrc](https://osv.dev/vulnerability/CVE-2026-3783) — published 2026-03-11T11:16:00Z