CVE-2026-40912 - Vulnerability Analysis

Overview

Traefik < 2.11.43, 3.6.14, and 3.7.0-rc.2 contains an authentication bypass caused by improper handling of dot-segments in StripPrefixRegex middleware with ForwardAuth, letting unauthenticated attackers access protected content, exploit requires backend dot-segment normalization.

Severity & Score

Impact

Unauthenticated attackers can bypass authentication and access protected backend content.

Mitigation

Update to versions 2.11.43, 3.6.14, 3.7.0-rc.2 or later.

References

• https://github.com/traefik/traefik/releases/tag/v2.11.43
• https://github.com/traefik/traefik/releases/tag/v3.6.14
• https://github.com/traefik/traefik/releases/tag/v3.7.0-rc.2
• https://github.com/traefik/traefik/security/advisories/GHSA-6jwx-7vp4-9847

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner