Traefik has an StripPrefixRegex Middleware Authorization Bypass via Path/RawPath Desync

🗓️ 24 Apr 2026 16:37:53Reported by GitHub Advisory DatabaseType

Traefik StripPrefixRegex auth bypass via dot segments with ForwardAuth or BasicAuth/DigestAuth.

Reporter	Title	Published	Views	Family All 45
attackerkb	CVE-2026-40912	30 Apr 202620:38	–	attackerkb
AlpineLinux	CVE-2026-40912	30 Apr 202620:38	–	alpinelinux
BDU FSTEC	Containous Traefik StripPrefixRegex Access Information Disclosure	12 May 202600:00	–	bdu_fstec
Circl	CVE-2026-40912	24 Apr 202613:35	–	circl
CNNVD	Traefik security vulnerabilities	30 Apr 202600:00	–	cnnvd
CVE	CVE-2026-40912	30 Apr 202620:38	–	cve
Cvelist	CVE-2026-40912 Traefik: StripPrefixRegex auth bypass via Path/RawPath desync	30 Apr 202620:38	–	cvelist
EUVD	EUVD-2026-26428	30 Apr 202620:38	–	euvd
HPE Security Bulletins	HPESBNW05077 rev.1 - HPE Networking Private 5G Core, Multiple vulnerabilities	7 Jul 202600:00	–	hpe
Tenable Nessus	Traefik < 2.11.43 / 3.x < 3.6.14 Multiple Vulnerabilities	2 May 202600:00	–	nessus

Vulners

Node

traefik traefikRange≤1.7.34go

traefik traefikRange<2.11.43go

traefik traefikRange3.0.0-beta1–3.6.14go

traefik traefikRange3.7.0-ea.1–3.7.0-rc.2go

Source	Link
github	www.github.com/traefik/traefik/security/advisories/GHSA-6jwx-7vp4-9847
github	www.github.com/traefik/traefik/releases/tag/v2.11.43
github	www.github.com/traefik/traefik/releases/tag/v3.6.14
github	www.github.com/traefik/traefik/releases/tag/v3.7.0-rc.2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-40912
access	www.access.redhat.com/errata/RHSA-2026:21772
access	www.access.redhat.com/security/cve/CVE-2026-40912
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40912.json
github	www.github.com/advisories/GHSA-6jwx-7vp4-9847

21 Jul 2026 13:44Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.2

CVSS 47.8

EPSS0.00767

SSVC