CVE-2025-15224 – libssh key passphrase bypass without agent set

CVE ID : CVE-2025-15224

Published : Jan. 8, 2026, 10:08 a.m. | 19 minutes ago

Description : When doing SSH-based transfers using either SCP or SFTP, and asked to do
public key authentication, curl would wrongly still ask and authenticate using
a locally running SSH agent.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…