logo

Database

Security controls bypass or absence In github.com/traefik/traefik

Description

Traefik has a StripPrefix Route-Level Auth Bypass via Path Normalization in github.com/traefik/traefik

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-480202. NVD-2026-480203. OSV-2026-480204. OSV-GO-2026-57525. GHSA-xf64-8mw2-4gr26. GCVE-2026-480207. ACCESS-CVE-2026-480208. SECURITY-cve-2026-48020.json9. GHSA-xf64-8mw2-4gr2

References

1. https://github.com/traefik/traefik/security/advisories/GHSA-xf64-8mw2-4gr22. https://bugzilla.redhat.com/show_bug.cgi?id=24919153. https://github.com/traefik/traefik/releases/tag/v2.11.484. https://github.com/traefik/traefik/releases/tag/v3.6.195. https://github.com/traefik/traefik/releases/tag/v3.7.36. https://github.com/Hunt-Benito/traefik-stripprefix-auth-bypass-cve-2026-48020-path-normalization

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-Q19SW – Vulnerability | Fluid Attacks Database