CVE-2026-35051 - Vulnerability Analysis

Overview

Traefik < 2.11.43, < 3.6.14, and < 3.7.0-rc.2 contain an authentication bypass caused by misconfiguration of ForwardAuth middleware with trustForwardHeader=false behind trusted upstream proxy, letting attackers bypass authentication, exploit requires deployment behind trusted upstream proxy.

Severity & Score

Impact

Attackers can bypass authentication, gaining unauthorized access to protected resources.

Mitigation

Upgrade to versions 2.11.43, 3.6.14, or 3.7.0-rc.2 or later.

References

• https://github.com/traefik/traefik/security/advisories/GHSA-6384-m2mw-rf54
• https://github.com/traefik/traefik/releases/tag/v2.11.43
• https://github.com/traefik/traefik/releases/tag/v3.6.14
• https://github.com/traefik/traefik/releases/tag/v3.7.0-rc.2

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner