CVE-2025-15224EPSS p39.2%
CVE-2025-15224CVE-2025-15224
haxx / curl
Description
When doing SSH-based transfers using either SCP or SFTP, and asked to do
public key authentication, curl would wrongly still ask and authenticate using
a locally running SSH agent.
Scoring
| CVSS | 3.1 () |
| Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N |
| EPSS | 0.48% probability of exploitation · percentile 39.2% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-15 |