Is the DLP vulnerable to CVE-2026-9080

Products

• Data Loss Prevention

Issue/Introduction

Calling curl_easy_pause() from inside a CURLMOPT_SOCKETFUNCTION event callback triggers a use-after-free: libcurl stores a flag using a dangling struct pointer immediately after the pointer's memory has been freed.

Resolution

Although curl_easy_pause() is used, the vulnerability requires calling it within a CURLMOPT_SOCKETFUNCTION callback (event-based multi interface). DLP uses the polling-based multi interface (curl_multi_perform + curl_multi_fdset) and CURLMOPT_SOCKETFUNCTION is never set, so the dangerous code path cannot be triggered.