A vulnerability was found in cURL up to 8.17.0. It has been classified as critical. Impacted is an unknown function of the component libssh. This manipulation causes improper authentication.
This vulnerability appears as CVE-2025-15224. The attack requires local access. There is no available exploit.
Upgrading the affected component is recommended.
