Go/Traefik CVE-2026-65601: medium, EPSS 0.51%
Traefik Gateway API HTTPRoute BackendRef ExtensionRef Namespace Confusion
Action: Upgrade Traefik to 3.7.7 or later.
go get Traefik@v3.7.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.7.0 | 3.7.7 | - |
Fixed versions
| 3.7.7 |
Sources
- osv: GHSA-qq9q-x9w4-chhj
- https://github.com/traefik/traefik/security/advisories/GHSA-qq9q-x9w4-chhj
- https://nvd.nist.gov/vuln/detail/CVE-2026-65601
- https://github.com/traefik/traefik/pull/13462
- https://github.com/traefik/traefik/commit/655d6324ab4a1475892a958d4bae389720a67ea9
- https://github.com/traefik/traefik
- https://www.vulncheck.com/advisories/traefik-before-namespace-confusion-via-httproute-extensionref
CVE-2026-65601 · published · modified · JSON