CVE-2026-54763

Katalog CVE

CVSS 10.0 · Critical EPSS 0,24%

Kerentanan Improper Handling of Case Sensitivity pada traefik. Skor CVSS 3.1 10.0 (Critical) menurut NVD.

Deskripsi (NVD)

Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewares strip canonical-cased spoofed identity headers before writing Traefik's own value, but do not account for underscore-variant header names, which many backends normalize identically to dashed forms. An attacker able to reach a protected route can inject an underscore-variant header that survives Traefik's stripping and reaches the backend alongside, or on the unauthenticated ForwardAuth authResponseHeaders path instead of, the value Traefik intended to set, spoofing identity or authorization context. This issue is fixed in versions v2.11.51, v3.6.22, and v3.7.6.

Rincian

Terbit di NVD

6 Juli 2026

Terakhir diubah

8 Juli 2026

Status NVD

Analyzed

CVSS 3.1

10.0 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-178: Improper Handling of Case Sensitivity
CWE-290: Authentication Bypass by Spoofing
CWE-345: Insufficient Verification of Data Authenticity

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 13,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/traefik/traefik/security/advisories/GHSA-x677-9fxg-v5c5 patch · advisory vendor
• https://github.com/traefik/traefik/commit/108a5264473a2cbc8f12d6d691a3c6553cdf2c1b patch
• https://github.com/traefik/traefik/pull/13262 issue tracking