Traefik: Security policy bypass and data confidentiality compromise (GHSA-hrpp-p4fc-wwf8)

A security vulnerability has been identified in Traefik that allows an attacker to bypass security policies and compromise data confidentiality. This issue is documented under advisory GHSA-hrpp-p4fc-wwf8. The vulnerability affects Traefik versions 3.x.x prior to 3.7.16 and all versions prior to 2.11.60. Users should apply the official vendor patches as documented in the provided advisory.

Impact

Successful exploitation allows an attacker to circumvent security configurations and gain unauthorized access to sensitive information handled by the Traefik proxy.

Recommendation

• Upgrade all instances of Traefik to version 3.7.16 or 2.11.60 to mitigate the reported vulnerability.
• Review internal security configurations for any instances where Traefik policies were bypassed or anomalous traffic patterns were observed.
• Monitor proxy logs for unauthorized access patterns or unexpected attempts to bypass defined security middleware.