THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-15079 (MEDIUM 5.3) — When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in the libssh *global* known_hosts file.

[NVD] CVE-2025-15079 (MEDIUM 5.3) — When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts not present in the specified file if they were added as recognized in the libssh global known_hosts file.

lownvdPublished 2026-01-08

CVE-2025-15079 CVSS: 5.3 MEDIUM Published: 2026-01-08T10:15:47.100

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in the libssh *global* known_hosts file.

Indicators of compromise

CVE-2025-15079cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-15079