# traefik.

Every CVE that names traefik among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Traefik before 2.11.60 and 3.7.16 ForwardAuth NTLM/Negotiate Identity Leak](https://agentprime.io/advisories/CVE-2026-121966.md)
  `CVE-2026-121966` · CVE record: traefik traefik · CVSS 7.0 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-488
- [Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Service](https://agentprime.io/advisories/CVE-2026-119574.md)
  `CVE-2026-119574` · CVE record: traefik traefik · CVSS 8.2 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-567
- [Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secret](https://agentprime.io/advisories/CVE-2026-119573.md)
  `CVE-2026-119573` · CVE record: traefik traefik · CVSS 2.1 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Broken access control
- [Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider](https://agentprime.io/advisories/CVE-2026-119572.md)
  `CVE-2026-119572` · CVE record: traefik traefik · CVSS 7.0 High · Not analysed yet · Published 30 Oct 2026 · Tags: Authentication bypass
- [Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matcher](https://agentprime.io/advisories/CVE-2026-114656.md)
  `CVE-2026-114656` · CVE record: traefik traefik · CVSS 6.9 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-436
- [Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper](https://agentprime.io/advisories/CVE-2026-114642.md)
  `CVE-2026-114642` · CVE record: traefik traefik · CVSS 7.0 High · Not analysed yet · Published 22 Oct 2026 · Tags: Weak cryptography or TLS
- [Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper](https://agentprime.io/advisories/CVE-2026-114641.md)
  `CVE-2026-114641` · CVE record: traefik traefik · CVSS 6.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Race condition
- [Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router](https://agentprime.io/advisories/CVE-2026-114640.md)
  `CVE-2026-114640` · CVE record: traefik traefik · CVSS 7.0 High · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass
- [Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pool](https://agentprime.io/advisories/CVE-2026-114639.md)
  `CVE-2026-114639` · CVE record: traefik traefik · CVSS 7.0 High · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass
- [Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collision](https://agentprime.io/advisories/CVE-2026-114638.md)
  `CVE-2026-114638` · CVE record: traefik traefik · CVSS 7.0 High · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass
- [Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak](https://agentprime.io/advisories/CVE-2026-114637.md)
  `CVE-2026-114637` · CVE record: traefik traefik · CVSS 7.0 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-488
- [Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router](https://agentprime.io/advisories/CVE-2026-114636.md)
  `CVE-2026-114636` · CVE record: traefik traefik · CVSS 7.0 High · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass
- [Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Scheme](https://agentprime.io/advisories/CVE-2026-114635.md)
  `CVE-2026-114635` · CVE record: traefik traefik · CVSS 7.0 High · Not analysed yet · Published 22 Oct 2026 · Tags: Authentication bypass
- [Traefik before 2.11.46, 3.6.17, and 3.7.1 Cross-Namespace Resource Reference via Kubernetes Annotations](https://agentprime.io/advisories/CVE-2026-112778.md)
  `CVE-2026-112778` · CVE record: traefik traefik · CVSS 6.4 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Broken access control
- [Traefik v3.7.0 Authentication Bypass via from-to-www-redirect](https://agentprime.io/advisories/CVE-2026-88877.md)
  `CVE-2026-88877` · CVE record: traefik traefik · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Broken access control
- [Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict](https://agentprime.io/advisories/CVE-2026-85597.md)
  `CVE-2026-85597` · CVE record: traefik traefik · CVSS 8.2 High · Not analysed yet · Published 4 Sept 2026 · Tags: Broken access control
- [Traefik v3.7 Authentication Bypass via TLS Option Conflict](https://agentprime.io/advisories/CVE-2026-85596.md)
  `CVE-2026-85596` · CVE record: traefik traefik · CVSS 8.2 High · Not analysed yet · Published 4 Sept 2026 · Tags: Authentication bypass
- [Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth](https://agentprime.io/advisories/CVE-2026-85595.md)
  `CVE-2026-85595` · CVE record: traefik traefik · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Sept 2026 · Tags: Authentication bypass
- [Traefik v3.7.1 crossProviderNamespaces Bypass via Service Middleware](https://agentprime.io/advisories/CVE-2026-85594.md)
  `CVE-2026-85594` · CVE record: traefik traefik · CVSS 7.0 High · Not analysed yet · Published 4 Sept 2026 · Tags: Broken access control

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=traefik>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/traefik/>. Everything for agents: <https://agentprime.io/llms.txt>.