onyx --cves cve-2026-71325
CVE-2026-71325
- score
- 0.1
- cvss
- 4.4
- epss
- 0.2%
- published
- 2026-08-06
- kev added
- —
- first seen
Traefik < 2.11.54, 3.6.25, and 3.7.10 contains a broken access control caused by improper rejection of cross-namespace @kubernetescrd references in TraefikService backend resolution, letting tenants bypass namespace isolation, exploit requires RBAC confinement to a single namespace.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 5
- https://github.com/traefik/traefik/commit/65ebf4b47fbdc33e3856803a5844a404e094d52d
- https://github.com/traefik/traefik/releases/tag/v2.11.54
- https://github.com/traefik/traefik/releases/tag/v3.6.25
- https://github.com/traefik/traefik/releases/tag/v3.7.10
- https://github.com/traefik/traefik/security/advisories/GHSA-62fc-8686-hfmq