CVE-2026-12547

Name of the Vulnerable Software and Affected Versions libsoup (affected versions not specified)

Description SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority (host:port). If the proxy configuration changes through system settings or Web Proxy Auto-Discovery (WPAD), the cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, resulting in the leak of credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.