Vulnerabilities

TI-2026-58722 CVE-2026-85597 · GHSA-q42x-32f8-m4r5

Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict

LOW 36

Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS opti…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00351 Published 2026-09-04 Fixed in 2.11.55 CWE-863

TI-2026-58720 CVE-2026-85595 · GHSA-4v96-rv7j-9wmr

Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth

MEDIUM 47

Traefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an authentication bypass vulnerability in the digestAuth middleware where unknown usernames receive an empty secret instead of rejection.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02451 Published 2026-09-04 Fixed in 2.11.55 CWE-287

Vulnerabilities

Filters

Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict

Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth