CVE-2016-7141

CVE-2016-7141 describes a high-severity vulnerability in curl and libcurl versions prior to 7.50.2, specifically when built with NSS and libnsspem.so is available. This flaw allows remote attackers to hijack TLS connection authentication by reusing a previously loaded client certificate for a connection where none was explicitly set, affecting products like haxx leap, haxx libcurl, opensuse leap, and opensuse libcurl. The vulnerability has a CVSSv3 score of 7.5, indicating a high impact on integrity with low attack complexity and no user interaction required. There is currently no evidence of active exploitation, and no public exploit code or significant community discussion has been observed.