CVE-2025-0167

Summary

CVE-2025-0167 is a vulnerability affecting curl, a widely-used command-line tool for transferring data. Under specific conditions, when curl is instructed to use a `.netrc` file for credentials and follow HTTP redirects, the tool may inadvertently disclose the password used for the initial host to the redirected host. This issue only arises if the `.netrc` file contains a `default` entry that omits both login and password information, making this a relatively uncommon scenario.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.