A flaw in curl causes the effective URL metadata to include authentication credentials that curl reads from a local configuration file, such as a .netrc file. When an application or script queries CURLINFO_EFFECTIVE_URL and subsequently logs or displays the returned string, those credentials can be exposed to a local user. The vulnerability exploits improper handling of sensitive data during URL resolution, resulting in the accidental disclosure of authentication tokens.

Any system running curl, regardless of operating system, can be affected if curl is configured to source credentials from local files. The presence of a .netrc file or other similar credential store is required for the flaw to be exploitable.

The CVSS score of 3.3 indicates a low severity impact. No EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalogue, suggesting limited known exploitation. Attackers must have local access to the machine and to the application or script that logs the resolved URL. The risk is therefore confined to local users, and the exploitation is possible only when applications inadvertently expose the effective URL. Nonetheless, the accidental disclosure of credentials can compromise accounts and services that rely on those tokens.