VulnSocial

CVE-2026-112778(traefik / traefik)

LOWCVSS 8.8 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress provider, allowing references to Middlewares, ServersTransports, and TLSOptions in other namespaces. Attackers able to create or update Ingress or Service resources in one namespace can set router.middlewares or service.serverstransport annotations to obtain another tenant's injected credentials or reuse its client certificates, bypassing namespace-based tenant isolation.

traefik CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Weakness type (CWE)
CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • traefik

Affected systems

Vendors
traefik
Products
traefik

1 version affected across 1 product

Deep dive

Full discourse1 post
  • Upwind Security MDR@UpwindMDR

    🚨High - Traefik Kubernetes Ingress Cross-Namespace Annotation Reference (CVE-2026-112778) Traefik’s Kubernetes Ingress provider fails to validate namespaces in Ingress/Service annotations referencing Middlewares, ServersTransports, and TLSOptions. An attacker with rights to create/update Ingress or Service in one namespace can point annotations to objects in another namespace, reusing client certs or injecting credentials and breaking tenant isolation. 👉Affected: traefik (Kubernetes Ingress provider)

    00010109
    360 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Apptraefiktraefik---
Apptraefiktraefik3.7.0--

Explore more

Back to dashboardtraefik CVEstraefik vulnerabilities