CVE-2026-65601

creationtimestamp| type| source ---|---|--- 2026-08-05 22:35:12+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj 2026-08-05 23:31:11+00:00| seen| https://gist.github.com/alon710/55629b813908ae24f1e292f2b3f6a8d5 2026-08-06 00:00:17+00:00...

CVE-2026-65602

creationtimestamp| type| source ---|---|--- 2026-08-05 22:32:39+00:00| seen| https://gist.github.com/alon710/8d9bdd08d5f9d0638cb7af9de6c94fc7 2026-08-05 22:35:09+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-42cj-m3vj-89wv 2026-08-06 00:00:18+00:00...

Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass

Summary There is a medium-severity cross-provider reference vulnerability in Traefik's Kubernetes CRD provider. The crossProviderNamespaces allowlist is enforced for HTTP serversTransport references but was not enforced for IngressRouteTCP service serversTransport references. A low-privileged...

EUVD-2026-47646

Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass...

EUVD-2026-47645

Traefik Gateway API HTTPRoute BackendRef ExtensionRef Namespace Confusion...

GHSA-QQ9Q-X9W4-CHHJ Traefik Gateway API HTTPRoute BackendRef ExtensionRef Namespace Confusion

Summary There is a medium-severity namespace-confusion vulnerability in Traefik's Kubernetes Gateway API provider. When resolving HTTPRoute.spec.rules.backendRefs.filters.extensionRef, Traefik used the backend Service namespace instead of the HTTPRoute namespace. A low-privileged route author...

Traefik Gateway API HTTPRoute BackendRef ExtensionRef Namespace Confusion

Summary There is a medium-severity namespace-confusion vulnerability in Traefik's Kubernetes Gateway API provider. When resolving HTTPRoute.spec.rules.backendRefs.filters.extensionRef, Traefik used the backend Service namespace instead of the HTTPRoute namespace. A low-privileged route author...

SUSE CVE-2026-67309

Traefik versions = v3.7.0 and = v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware generated from the nginx.ingress.kubernetes.io/rewrite-target annotation. When an Ingress path uses a regex that captures attacker-controlled text...

GHSA-7QF5-7PPR-87V8 Duplicate Advisory: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8rxv-jg7p-wvg3. This link is maintained to preserve external references. Original Description Traefik versions = v3.7.0 and = v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX...

Duplicate Advisory: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8rxv-jg7p-wvg3. This link is maintained to preserve external references. Original Description Traefik versions = v3.7.0 and = v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX...

CVE-2026-67309

Traefik versions = v3.7.0 and = v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware generated from the nginx.ingress.kubernetes.io/rewrite-target annotation. When an Ingress path uses a regex that captures attacker-controlled text...

CVE-2026-67309 Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass

Traefik versions = v3.7.0 and = v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware generated from the nginx.ingress.kubernetes.io/rewrite-target annotation. When an Ingress path uses a regex that captures attacker-controlled text...

CVE-2026-67309

Traefik 3.7.x (>=3.7.0 and

CVE-2026-67309 Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass

Traefik versions = v3.7.0 and = v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware generated from the nginx.ingress.kubernetes.io/rewrite-target annotation. When an Ingress path uses a regex that captures attacker-controlled text...

CVE-2026-67309 Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass

Traefik versions = v3.7.0 and = v3.7.7 contain a path traversal vulnerability in the Kubernetes Ingress NGINX provider's RewriteTarget middleware generated from the nginx.ingress.kubernetes.io/rewrite-target annotation. When an Ingress path uses a regex that captures attacker-controlled text...

PT-2026-67289

Name of the Vulnerable Software and Affected Versions Traefik versions 3.7.0 through 3.7.7 Description A path traversal issue exists in the Kubernetes Ingress NGINX provider's RewriteTarget middleware, which is generated from the nginx.ingress.kubernetes.io/rewrite-target annotation. When an...

CVE-2026-54761

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This vulnerability exists in the Kubernetes Gateway provider's crossProviderNamespaces allowlist. A remote attacker with the ability to create an accepted HTTPRoute and a matching ReferenceGrant can exploit this by misconfiguri...

OPENSUSE-SU-2026:11403-1 traefik2-2.11.53-1.1 on GA media

These are all security issues fixed in the traefik2-2.11.53-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11402-1 traefik-3.7.9-1.1 on GA media

These are all security issues fixed in the traefik-3.7.9-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-65600

A flaw was found in Traefik. An unauthenticated remote attacker can bypass authentication due to a path traversal vulnerability in the ReplacePathRegex middleware. When this middleware is misconfigured, it forwards un-normalized paths, allowing a backend to resolve them to protected routes and...