GO-2026-5752

vendorUSosv

Traefik has a StripPrefix Route-Level Auth Bypass via Path Normalization in github.com/traefik/traefik

view advisory published 2026-06-25Licence: per source

Traefik has a StripPrefix Route-Level Auth Bypass via Path Normalization in github.com/traefik/traefik

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-48020UScritical10.0OT highExploit
Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middleware that allows an u…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan