/
← Voltar ao feed
medium

Traefik vulnerability allows data confidentiality breach and security policy bypass (GHSA-hrpp-p4fc-wwf8)

1 fonte(s) · 1 atualização(ões) · publicado 20/10/2026 21:00 · coletado há 17 horas

CERT-FR published advisory CERTFR-2026-AVI-1356 on 21 October 2026 about a vulnerability in the Traefik reverse proxy. It lets an attacker compromise data confidentiality and bypass the security policy. Affected versions are Traefik 3.x before 3.7.16 and Traefik versions before 2.11.60. The advisory does not report exploitation in the wild and does not assign a CVE identifier.

Detalhes técnicos

  • Impact: breach of data confidentiality and security policy bypass.
  • The advisory gives no technical details of the flaw. It refers to the vendor advisory GHSA-hrpp-p4fc-wwf8 dated 21 October 2026.

Remediação

  • Upgrade to a fixed release: Traefik 3.7.16 or later on the 3.x branch, and 2.11.60 or later on the 2.x branch.
  • Consult the vendor security bulletin GHSA-hrpp-p4fc-wwf8 for the patches.

Linha do tempo

  1. cert.ssi.gouv.fr ↗ · pub. 20/10/2026 21:00 · coletado 23/10 12:01 primeiro registro

    Traefik vulnerability allows data confidentiality breach and security policy bypass (GHSA-hrpp-p4fc-wwf8)

    ler a análise desta fonte

    CERT-FR published advisory CERTFR-2026-AVI-1356 on 21 October 2026 about a vulnerability in the Traefik reverse proxy. It lets an attacker compromise data confidentiality and bypass the security policy. Affected versions are Traefik 3.x before 3.7.16 and Traefik versions before 2.11.60. The advisory does not report exploitation in the wild and does not assign a CVE identifier.

    Technical Details

    • Impact: breach of data confidentiality and security policy bypass.
    • The advisory gives no technical details of the flaw. It refers to the vendor advisory GHSA-hrpp-p4fc-wwf8 dated 21 October 2026.

    Remediation

    • Upgrade to a fixed release: Traefik 3.7.16 or later on the 3.x branch, and 2.11.60 or later on the 2.x branch.
    • Consult the vendor security bulletin GHSA-hrpp-p4fc-wwf8 for the patches.