CVE-2025-66491

score

<0.1

cvss

5.9

epss

0.2%

published

2025-12-09

kev added

—

first seen

2026-10-21

Traefik 3.5.0 through 3.6.2 contains a man-in-the-middle vulnerability caused by inverted TLS verification logic in the nginx.ingress.kubernetes.io/proxy-ssl-verify annotation, letting attackers intercept HTTPS backend traffic, exploit requires misconfiguration of the annotation.