Authentication Bypass in Traefik Affecting Multiple Versions
CVE-2026-114635

7HIGH

Key Information:

Vendor

Traefik

Status
Traefik
Vendor
CVE Published:
22 October 2026

What is CVE-2026-114635?

A significant vulnerability exists in Traefik versions prior to v2.11.58 and v3.7.14 that allows unauthenticated clients to bypass authentication mechanisms due to improper handling of TLS states during Server Name Indication (SNI) checks. Specifically, when the TLS state is nil, it becomes possible for attackers to send HTTP/2 requests with the ':scheme' pseudo-header set to 'http', enabling them to access routers that demand client certificates without the required authentication, thus posing a serious security risk.

Affected Version(s)

traefik 0 < 2.11.58

traefik 3.0.0 < 3.7.14

traefik 2.11.58

References

https://github.com/traefik/traefik/security/advisories/GH...
vendor-advisory
https://www.vulncheck.com/advisories/traefik-before-2.11....
third-party-advisory

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

dlorenc
.