Skip to content
Threat Feed
Subscribe

Product

Traefik (V3.0.0-V3.7.12)

1 brief RSS
critical advisory

Traefik HTTP/3 Backend Authentication Bypass via Connection Reuse

Traefik fails to isolate connection-bound NTLM and Negotiate authentication on HTTP/3 routes, allowing unrelated clients to inherit victim-authenticated backend connections.

Traefik +3 vulnerability auth-bypass webserver proxy request-smuggling authorization-bypass
1r 2t 1c