CVEs we hold for Traefik

Records whose assigning authority named Traefik as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-88879Traefik before v2.11.56 Identity Spoofing via Header Aliastraefik

CVE-2026-88878Traefik v2.8.2 through v3.6 HTTP/3 Timeout Bypasstraefik

CVE-2026-88877Traefik v3.7.0 Authentication Bypass via from-to-www-redirecttraefik

CVE-2026-88012Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unboundedtraefik

CVE-2026-88011Traefik: ForwardAuth identity spoofing via dot-form header aliastraefik

CVE-2026-88010Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracletraefik

CVE-2026-88009Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing…traefik

CVE-2026-88008Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorizationtraefik

CVE-2026-88007Traefik HTTP/3 Backend NTLM Connection Reusetraefik

CVE-2026-88004Traefik entrypoint header-name sanitization bypassed via request trailerstraefik

CVE-2026-85597Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflicttraefik

CVE-2026-85596Traefik v3.7 Authentication Bypass via TLS Option Conflicttraefik

CVE-2026-85595Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuthtraefik

CVE-2026-85594Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middlewaretraefik

CVE-2026-71327Traefik: Gateway API route identity collision allows cross-namespace backend hijackingtraefik

CVE-2026-71326Traefik: BasicAuth singleflight key collision allows authenticated identity spoofingtraefik

CVE-2026-71325Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendReftraefik

CVE-2026-71324Traefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pooltraefik

CVE-2026-67309Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypasstraefik

CVE-2026-65602Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypasstraefik

CVE-2026-65601Traefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionReftraefik

CVE-2026-65600Traefik before v2.11.52 Authentication Bypass via ReplacePathRegextraefik

CVE-2026-54765Traefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:porttraefik

CVE-2026-54764ForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=falsetraefik

CVE-2026-54763Traefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuthtraefik

CVE-2026-54762Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution failstraefik

CVE-2026-54761Traefik: Kubernetes Gateway crossProviderNamespaces bypass allows HTTPRoute outside the allowlist to expose internal…traefik

CVE-2026-53622Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hoststraefik

CVE-2026-48491Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypasstraefik

CVE-2026-48020Traefik StripPrefix Route-Level Auth Bypass via Path Normalizationtraefik

CVE-2026-44774Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider…traefik

CVE-2026-41263Traefik: BasicAuth middleware: timing side-channel vulnerabilitytraefik

CVE-2026-41181Traefik: Errors middleware forwards Authorization and Cookie headers to separate error page servicetraefik

CVE-2026-41174Traefik Kubernetes CRD allows unauthorized cross-namespace middleware bindingtraefik

CVE-2026-40912Traefik: StripPrefixRegex auth bypass via Path/RawPath desynctraefik

CVE-2026-39858Traefik: Forwarded alias spoofing top pre-auth decision bypasstraefik

CVE-2026-35051Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass authtraefik

CVE-2026-33433Traefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerFieldtraefik

CVE-2026-32695Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypasstraefik

CVE-2026-32595Traefik: BasicAuth Middleware Timing Attack Allows Username Enumerationtraefik

CVE-2026-32305Traefik mTLS bypass via fragmented ClientHello SNI extraction failuretraefik

CVE-2026-29777Traefik has a kubernetes gateway rule injection via unescaped backticks in HTTPRoute match valuestraefik

CVE-2026-29054Traefik: lowercase `Connection` tokens can delete traefik-managed forwarded identity headers (for example, `X-Real-Ip`)traefik

CVE-2026-26999Traefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (slowloris doS)traefik

CVE-2026-26998Traefik: unbounded io.ReadAll on auth server response body causes OOM denial of service(DOS)traefik

CVE-2026-25949Traefik: TCP readTimeout bypass via STARTTLS on Postgrestraefik

CVE-2026-22045Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stalltraefik

CVE-2025-66491Traefik has Inverted TLS Verification Logic in its ingress-nginx Providertraefik

CVE-2025-66490Traefik doesn't Prevent Path Normalization Bypass in Router + Middleware Rulestraefik

CVE-2025-54386Traefik's Client Plugin is Vulnerable to Path Traversal, Arbitrary File Overwrites and Remote Code Executiontraefik

CVE-2025-47952Traefik allows path traversal using url encodingtraefik

CVE-2025-32431Traefik has a possible vulnerability with the path matcherstraefik

CVE-2024-52003X-Forwarded-Prefix Header still allows for Open Redirect in traefiktraefik

CVE-2024-45410HTTP client can remove the X-Forwarded headers in Traefiktraefik

CVE-2024-39321Traefik vulnerable to bypassing IP allow-lists via HTTP/3 early data requests in QUIC 0-RTT handshakestraefik

CVE-2024-28869Possible denial of service vulnerability with Content-length header in Traefiktraefik

CVE-2023-54365Traefik - Denial of Service via HTTP/2 Request HandlingTraefik

CVE-2023-47633Uncontrolled Resource Consumption in Traefiktraefik

CVE-2023-47124Denial of service whith ACME HTTPChallenge in Traefiktraefik

CVE-2023-47106Incorrect processing of fragment in the URL leads to Authorization Bypass in Traefiktraefik

CVE-2023-29013HTTP header parsing could cause a deny of servicetraefik

CVE-2022-46153Routes exposed with an empty TLSOption in traefiktraefik

CVE-2022-39271Traefik HTTP/2 connections management could cause a denial of servicetraefik

CVE-2022-23632Traefik skips the router TLS configuration when the host header is an FQDNtraefik

CVE-2022-23469Authorization header displayed in the debug logstraefik

CVE-2021-32813Drop Headers via Malicious Connection Headertraefik

66 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.