CVE-2026-112778

Traefik versions before 2.11.46 , 3.x before 3.6.17 , and 3.7.0 are vulnerable to a Cross-Namespace Resource Reference in the Kubernetes Ingress provider. The root cause is a lack of namespace validation for Ingress and Service annotations. This allows an attacker with permissions to create or up...