Vulnérabilité dans Traefik (11 juin 2026)
A security vulnerability has been identified in Traefik, allowing attackers to bypass security policies. This issue affects older versions of the popular reverse proxy and load balancer, requiring immediate patching to prevent exploitation.
A security vulnerability has been discovered within Traefik, a widely used open-source reverse proxy and load balancer. This vulnerability enables attackers to circumvent the application's security policies, potentially leading to unauthorized access or malicious activity. The issue specifically impacts Traefik versions prior to v3.6.21 and v3.7.5. The CERT-FR has released a security advisory detailing the vulnerability and recommending users update their installations to mitigate the risk. Users should consult the provided security bulletin for detailed instructions on how to apply the necessary patches. The bulletin can be found at: https://github.com/traefik/traefik/security/advisories/GHSA-3g6v-2r68-prfc. The CVE identifier for this vulnerability is CVE-2026-54761.