CVE-2026-48020— Traefik 授权问题漏洞

Traefik StripPrefix Route-Level Auth Bypass via Path Normalization

Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.48, 3.6.19, and 3.7.3, there is a high severity vulnerability in Traefik's StripPrefix middleware that allows an unauthenticated attacker to bypass route-level authentication and authorization. When a public router matches on a PathPrefix rule and applies the StripPrefix middleware, a request path containing .. or its percent-encoded form %2e%2e can match the public route at routing time and then, after the prefix is stripped and the path is normalized, resolve to a path served by a separate, authenticated router. As a result, an attacker can reach protected backend paths — such as admin or internal configuration endpoints — without satisfying the authentication middleware attached to the protected router. This vulnerability is fixed in 2.11.48, 3.6.19, and 3.7.3.

N/A

使用候选路径或通道进行的认证绕过

Traefik 授权问题漏洞

Traefik是Traefik公司开源的一款反向代理与负载均衡工具。 Traefik 2.11.48之前版本、3.6.19之前版本和3.7.3之前版本存在授权问题漏洞，该漏洞源于StripPrefix中间件问题，可能导致未经身份验证的攻击者绕过路由级身份验证和授权，通过包含..或%2e%2e的请求路径访问受保护的后端路径。

N/A

N/A