CVE-2025-15079 – libssh global known_hosts override

CVE ID : CVE-2025-15079

Published : Jan. 8, 2026, 10:08 a.m. | 20 minutes ago

Description : When doing SSH-based transfers using either SCP or SFTP, and setting the
known_hosts file, libcurl could still mistakenly accept connecting to hosts
*not present* in the specified file if they were added as recognized in the
libssh *global* known_hosts file.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…