CVE-2026-85596

Traefik versions >= v3.7.0 and <= v3.7.10 contain an authentication bypass in the Kubernetes Ingress NGINX provider.

Traefik

Traefik versions >= v3.7.0 and <= v3.7.10 contain an authentication bypass in the Kubernetes Ingress NGINX provider. The TLS option generated for an Ingress carrying the nginx.ingress.kubernetes.io/auth-tls-secret annotation was named after the Ingress namespace and name. As a result, two Ingress objects sharing the same host, the same client CA secret, and the same client-authentication mode produced two distinct TLS option names for that host. Traefik treats this as a TLS…

4. Sep 2026

Ausgewertete Quellen

• Hinweis
  https://www.vulncheck.com/advisories/traefik-3.7-authentication-bypass-via-tls-option-conflict
• NVD
  CVE-2026-85596
• GitHub
  https://github.com/traefik/traefik/security/advisories/GHSA-j994-9gqj-9hwq