CVE-2026-114639

Traefik versions 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 are vulnerable to an authentication bypass in the Negotiate connection pool . The root cause is that a first request using an Authorization: Negotiate token authenticates a socket within a globally shared backend connection pool that ...