CVE-2026-114637

Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin NTLM/Negotiate-authenticated backend connections to their frontend connection. Unauthenticated clients can be handed a pooled keep-alive backend...

EUVD-2026-107892

Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin NTLM/Negotiate-authenticated backend connections to their frontend connection. Unauthenticated clients can be handed a pooled keep-alive backend...

CVE-2026-114637

Traefik versions v3.2.0 before v3.7.14 are vulnerable to an authentication bypass within the experimental FastProxy connection pool . The root cause is a failure to pin NTLM/Negotiate-authenticated backend connections to their specific frontend connections. Consequently, unauthenticated clients c...

WS-2026-0138

github.com/traefik/traefik/v3 v3.2.0-rc1 - v3.7.13: experimental FastProxy connection pool shares NTLM/Negotiate-authenticated backend connections across frontend connections, letting an unauthenticated client act as the victim GHSA-53qr-784g-cj35...