CVE-2026-88007

Traefik is an open source HTTP reverse proxy and load balancer.

Traefik

Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypoint ConnContext does not call service.AddTransportOnContext, so kerberosRoundTripper uses a shared backend transport instead of a transport dedicated to each frontend connection. With HTTP/3 enabled, a backend using connection-bound NTLM or Negotiate authentication, and backend keep-alive, an unrelated client can reuse a backend connection authenticated for…

10. Sep 2026

Ausgewertete Quellen

• NVD
  CVE-2026-88007
• GitHub
  https://github.com/traefik/traefik/security/advisories/GHSA-qqjf-53cj-pwvv