CVE-2026-65602

Traefik 3.x prior to 3.6.23 / 3.7.7 is vulnerable to a crossProviderNamespaces allowlist bypass in IngressRouteTCP serversTransport references. A low-privilege Kubernetes user in an unlisted namespace can set serversTransport: foo@file, causing Traefik to accept a forbidden cross-provider referen...

CVE-2026-65602 Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass

Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTCP service serversTransport references the allowlist was only enforced for HTTP serversTransport references. A low-privileged Kubernetes user in a namespace not listed in...

PT-2026-63360

Traefik 3.6.0 through 3.6.22 and 3.7.0 through 3.7.6 fail to enforce the crossProviderNamespaces allowlist for IngressRouteTCP service serversTransport references the allowlist was only enforced for HTTP serversTransport references. A low-privileged Kubernetes user in a namespace not listed in...