CVE-2026-33752Disclosure(lexiforest / curl_cffi)

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch lexiforest curl_cffi systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

curl_cffi is the a Python binding for curl. Prior to 0.15.0, curl_cffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to internal services such as cloud metadata endpoints. In addition, curl_cffi’s TLS impersonation feature can make these requests appear as legitimate browser traffic, which may bypass certain network controls. This vulnerability is fixed in 0.15.0.

lexiforest CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Exploit / PoC references

Weakness type (CWE)

CWE-918

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

curl_cffi

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 2d ago at 1 mentions (2026-04-04); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

lexiforest

Products

curl_cffi

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 3d

Signal classification3 categories

Disclosure

133.3%

Patch

133.3%

General

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-04	1	Disclosure1
2026-04-06	1	Patch1
2026-04-07	1	General1

Full discourse3 posts

Firmis Labs@FirmisLabs184d
General
CVE-2026-33752 · NIST 8.6/10 https://nvd.nist.gov/vuln/detail/CVE-2026-33752 ask your AI: "check if my project uses curl_cffi and if it's below version 0.15.0" then: "update curl_cffi to the latest version and make sure nothing breaks in my HTTP requests"
Post summary
The post references a high‑severity CVE and suggests mitigating it by updating the curl_cffi library, but it does not provide technical details, PoC, or evidence of exploitation.
1000021
1 followersView on X
CVEFind.com@CveFindCom184d
Patch
[CVE-2026-33752: HIGH] Python binding curl_cffi < 0.15.0 allows requests to internal IPs & auto-follows redirects, making it exploitable for redirecting to internal services. Update to version 0.15.0 for fix.#cve,CVE-2026-33752,#cybersecurity https://cvefind.com/CVE-2026-33752
Post summary
CVE‑2026‑33752 is a high‑severity flaw in curl_cffi <0.15.0 that permits internal IP access and auto‑redirects, potentially enabling internal service exploitation; updating to 0.15.0 fixes the issue.
0000036
619 followersView on X
PulsePatch.io@pulsepatchio187d
Disclosure
`curl_cffi` is impacted by CVE-2026-33752, a redirect-based SSRF vulnerability allowing internal network access with TLS impersonation bypass. Review applications using `curl_cffi` for URL input validation. #SSRF #Python #Infosec https://www.pulsepatch.io/posts/cve-2026-33752-curl-cffi-ssrf-vulnerability
Post summary
The tweet highlights the disclosure of CVE‑2026‑33752, a redirect‑based SSRF vulnerability in curl_cffi, warns of potential internal network access via TLS impersonation bypass, and advises input validation as a mitigation.
0000071
11 followersView on X

CPE platform detail5 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

5 of 5 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	lexiforest	curl_cffi	-	python	-
App	lexiforest	curl_cffi	0.15.0	python	-
App	lexiforest	curl_cffi	0.15.0	python	-
App	lexiforest	curl_cffi	0.15.0	python	-
App	lexiforest	curl_cffi	0.15.0	python	-

Explore more

Back to dashboard lexiforest CVEs curl_cffi vulnerabilities