THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-67339 (MEDIUM 5.3) — guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that

[NVD] CVE-2026-67339 (MEDIUM 5.3) — guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that

mednvdPublished 2026-08-01

CVE-2026-67339 CVSS: 5.3 MEDIUM Published: 2026-08-01T13:17:04.990

guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle misclassifies as direct connections.

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-67339cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-67339