cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.37.2, when a cpp-httplib client is configured with a proxy and set_…

CVE-2026-32627 affects cpp-httplib C++ HTTP/HTTPS library prior to version 0.37.2. When configured with proxy and redirect following enabled, the library silently disables TLS certificate and hostname verification on HTTPS redirects. This allows attackers to intercept connections with forged certificates, potentially capturing credentials and session tokens. The vulnerability requires specific configuration conditions including proxy usage and redirect following to be exploitable.