Traefik vulnerabilities
80 CVEs and advisories name Traefik as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-121966Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak
- CVE-2026-119574Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Service
- CVE-2026-119573Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secret
- CVE-2026-119572Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider
- CVE-2026-114656Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher
- CVE-2026-114642Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper
- CVE-2026-114641Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper
- CVE-2026-114640Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router
- CVE-2026-114639Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool
- CVE-2026-114638Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision
- CVE-2026-114637Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak
- CVE-2026-114636Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router
- CVE-2026-114635Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme
- CVE-2026-112778Traefik before 2.11.46, 3.6.17, and 3.7.1 Cross-Namespace Resource Reference via Kubernetes Annotations
- CVE-2026-88010Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle
- CVE-2026-88012Traefik: respondingTimeouts.readTimeout is not applied to HTTP/3, leaving slow-body uploads unbounded
- CVE-2026-88011Traefik: ForwardAuth identity spoofing via dot-form header alias
- CVE-2026-88009Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging
- CVE-2026-88008Traefik: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') and Incorrect Authorization
- CVE-2026-88007Traefik HTTP/3 Backend NTLM Connection Reuse
- CVE-2026-88004Traefik entrypoint header-name sanitization bypassed via request trailers
- CVE-2026-88879Traefik before v2.11.56 Identity Spoofing via Header Alias
- CVE-2026-88878Traefik v2.8.2 through v3.6 HTTP/3 Timeout Bypass
- CVE-2026-88877Traefik v3.7.0 Authentication Bypass via from-to-www-redirect
- CVE-2026-85597Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict
- CVE-2026-85596Traefik v3.7 Authentication Bypass via TLS Option Conflict
- CVE-2026-85595Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth
- CVE-2026-85594Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middleware
- CVE-2026-71327Traefik: Gateway API route identity collision allows cross-namespace backend hijacking
- CVE-2026-71326Traefik: BasicAuth singleflight key collision allows authenticated identity spoofing