SB2026082155 - Path traversal in Traefik

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026082155

SB2026082155 - Path traversal in Traefik

Published: August 21, 2026

Security Bulletin ID SB2026082155
CSH Severity
High
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Path traversal (CVE-ID: CVE-2026-67309)

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to bypass route-level authentication or authorization and access protected backend paths.

The vulnerability exists due to path traversal in the RewriteTarget middleware of the Kubernetes Ingress NGINX provider when processing requests that use a rewrite-target regex capturing attacker-controlled path content without a required path separator. A remote attacker can send a specially crafted request to bypass route-level authentication or authorization and access protected backend paths.

Exploitation requires the Kubernetes Ingress NGINX provider to be enabled, a public Ingress to use a vulnerable rewrite-target regex pattern, and the backend to normalize dot segments before request dispatch.


Remediation

Install update from vendor's website.

References