PT-2026-114424 · Git · Curl
CVE-2026-92390
·
Published
2026-10-14
·
Updated
2026-10-14
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
When invoked with
--remote-header-name (-J), curl fails to preserve its
documented anti-clobbering protection if an intermediate 103 Early Hints
response precedes the final HTTP response, or if an ETag header is processed
before Content-Disposition under --etag-save. This flaw allows an HTTP(S)
server to overwrite an existing local file specified in the
Content-Disposition header despite the presence of the -J non-overwrite
constraint. Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Curl