Authentication Bypass in Traefik Due to Path Traversal Vulnerability

CVE-2026-65600

What is CVE-2026-65600?

Certain versions of Traefik are susceptible to an authentication bypass due to a path traversal vulnerability in the ReplacePathRegex middleware. This issue arises when the middleware is configured with a regex that captures user-controlled segments without a mandatory path separator. An attacker can exploit this by sending a crafted request that generates an un-normalized path, allowing unauthorized access to secured backend routes by bypassing the expected authentication mechanisms. This vulnerability highlights the importance of correctly validating request paths before forwarding them. Traefik has released updates in versions 2.11.52, 3.6.23, and 3.7.7 to mitigate this risk.

References