Multiple Vulnerabilities in Traefik Software

CERT-FR Security Advisories

Published March 20th, 2026

Detected March 20th, 2026

Summary

CERT-FR has issued an advisory regarding multiple vulnerabilities discovered in Traefik software, affecting versions prior to v2.11.41, v3.6.11, and v3.7.0-ea.2. These vulnerabilities could lead to data confidentiality breaches and security policy bypasses. Users are advised to consult the publisher's security bulletins for patch information.

View original document View source feed page

What changed

CERT-FR, the French national cybersecurity agency, has issued an advisory (CERTFR-2026-AVI-0333) detailing multiple critical vulnerabilities found in Traefik software. The vulnerabilities, identified under CVE-2026-32305 and CVE-2026-32595, affect specific versions of Traefik, including those prior to v2.11.41, v3.6.11, and v3.7.0-ea.2. Exploitation of these flaws could result in unauthorized access to sensitive data and the circumvention of established security policies.

Organizations utilizing the affected versions of Traefik must immediately consult the official Traefik security bulletins (GHSA-g3hg-j4jv-cwfr and GHSA-wvvq-wgcr-9q48) to obtain and apply the necessary patches. Failure to do so could expose systems to significant data breaches and security policy violations. This advisory highlights the ongoing need for diligent software patching and vulnerability management in network infrastructure.

What to do next

Consult Traefik security bulletins GHSA-g3hg-j4jv-cwfr and GHSA-wvvq-wgcr-9q48
Apply available patches for affected Traefik versions

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 20 mars 2026 N° CERTFR-2026-AVI-0333 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans Traefik

Gestion du document

Risques

Atteinte à la confidentialité des données
Contournement de la politique de sécurité

Systèmes affectés

Traefik versions antérieures à v2.11.41
Traefik versions v3.6.x antérieures à v3.6.11
Traefik versions v3.7.0-ea.x antérieures à v3.7.0-ea.2

Résumé

De multiples vulnérabilités ont été découvertes dans Traefik. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données et un contournement de la politique de sécurité.