The vulnerability of the nameAndService() function in the pkg/provider/kubernetes/crd/kubernetes_http.go file, a provider for integrating with the Kubernetes CRD of the reverse proxy server Containous Traefik, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the nameAndService function in the pkg/provider/kubernetes/crd/kuberneteshttp.go file, which is part of the integration provider for Kubernetes’ CRD reverse proxy server Containous Traefik, is related to insufficient spatial partitioning. Exploiting this vulnerability could...

PT-2026-68797

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.54 Traefik versions prior to 3.6.25 Traefik versions prior to 3.7.10 Description An issue exists in the Kubernetes CRD provider where cross-namespace @kubernetescrd references are not properly rejected for...