Authentication Bypass

🗓️ 14 May 2026 17:48:09Reported by Veracode Vulnerability DatabaseType

Traefik authentication bypass via ForwardAuth when trustForwardHeader is false behind proxy.

Reporter	Title	Published	Views	Family All 39
ATTACKERKB	CVE-2026-35051	30 Apr 202620:26	–	attackerkb
AlpineLinux	CVE-2026-35051	30 Apr 202620:26	–	alpinelinux
BDU FSTEC	The vulnerability of the intermediate software ForwardAuth in the reverse proxy server Containous Traefik allows a perpetrator to gain unauthorized access to protected information.	12 May 202600:00	–	bdu_fstec
Circl	CVE-2026-35051	24 Apr 202613:35	–	circl
CNNVD	Traefik 数据伪造问题漏洞	30 Apr 202600:00	–	cnnvd
CVE	CVE-2026-35051	30 Apr 202620:26	–	cve
Cvelist	CVE-2026-35051 Traefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth	30 Apr 202620:26	–	cvelist
EUVD	EUVD-2026-26426	30 Apr 202620:26	–	euvd
Github Security Blog	Traefik's ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass authentication	24 Apr 202616:31	–	github
Tenable Nessus	Traefik < 2.11.43 / 3.x < 3.6.14 Multiple Vulnerabilities	2 May 202600:00	–	nessus

Vulners

Node

traefik github.com/traefik/traefikRangev1.0.alpha.0e683cc5355bc507dabac68bbc7559d3f179e185–1.0.alpha.0e683cc5355bc507dabac68bbc7559d3f179e185go

traefik github.com/traefik/traefikRangev3.0.0-beta1–3.0.0-beta1go

Source	Link
github	www.github.com/traefik/traefik/commit/5e1de225847184dbb250718cd0e9639bfffa5287
github	www.github.com/traefik/traefik/releases/tag/v2.11.43
github	www.github.com/traefik/traefik/releases/tag/v3.6.14
github	www.github.com/traefik/traefik/releases/tag/v3.7.0-rc.2
security	www.security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35051.json
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/security/cve/CVE-2026-35051
access	www.access.redhat.com/errata/RHSA-2026:21772
github	www.github.com/advisories/GHSA-6384-m2mw-rf54
github	www.github.com/traefik/traefik/security/advisories/GHSA-6384-m2mw-rf54

30 Jun 2026 06:04Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.2 - 10

CVSS 47.8

EPSS0.00267

SSVC