A use-after-free vulnerability exists in curl's HTTP/2 upload functionality, identified as CVE-2026-92392. This flaw affects the curl library and utility used for transferring data with various protocols. The vulnerability has been addressed in curl version 8.12.1-4.el10_2.8 and later.