Vulnerability in Traefik

CVE-2026-54763

Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewares strip canonical-cased spoofed identity headers before writing Traefik's own value, but…

Affected products

  • Traefik — versions < 2.11.51, >= 3.0.0-beta1, < v3.6.22, >= 3.0.0-beta1, < 3.6.22

Weakness classification (CWE)

References