Skip to content
Threat Feed
Subscribe

Product

Traefik (V2.11.0-V2.11.56)

1 brief RSS
critical advisory

Traefik HTTP/3 Backend Authentication Bypass via Connection Reuse

Traefik fails to isolate connection-bound NTLM and Negotiate authentication on HTTP/3 routes, allowing unrelated clients to inherit victim-authenticated backend connections.

Traefik +3 vulnerability auth-bypass webserver proxy request-smuggling authorization-bypass
1r 2t 1c