Traefik Traefik vulnerabilities
81 published vulnerabilities in Traefik Traefik, 1 of them exploited in the wild. The most were published in 2026 (56), and 56 so far in 2026.
Traefik Traefik vulnerabilities by year
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Traefik Traefik vulnerabilities
- CVE-2023-44487 HTTP/2 Rapid Reset Attack
- CVE-2024-45410 HTTP client can remove the X-Forwarded headers in Traefik
- CVE-2026-88877 Traefik v3.7.0 Authentication Bypass via from-to-www-redirect
- CVE-2026-85595 Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth
- CVE-2026-88007 Traefik HTTP/3 Backend NTLM Connection Reuse
- CVE-2026-88009 Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging
- CVE-2025-32431 Traefik has a possible vulnerability with the path matchers
- CVE-2023-54365 Traefik - Denial of Service via HTTP/2 Request Handling
- CVE-2026-85596 Traefik v3.7 Authentication Bypass via TLS Option Conflict
- CVE-2026-85597 Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict
- CVE-2022-46153 Routes exposed with an empty TLSOption in traefik
- CVE-2026-67309 Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.