Log in Start free

Vulnerability · Published Aug 6, 2026 · Assigned by GitHub_M

CVE-2026-71327Traefik: Gateway API route identity collision allows cross-namespace backend hijacking

High 7.6

In plain English

A high-severity security flaw in traefik from traefik. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)7.6High
Exploit odds (30 days)0.5%top 58.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Traefik is an open source HTTP reverse proxy and load balancer. From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go builds HTTPRoute, GRPCRoute, TCPRoute, and TLSRoute router and service identities by hyphen-concatenating namespace, route name, Gateway identity, entry point, and rule index, allowing colliding Routes to overwrite another namespace's backend. This issue is fixed in 3.6.25 and 3.7.10.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Gogithub.com/traefik/traefikno fix listedGO-2026-6209
Gogithub.com/traefik/traefik/v2no fix listedGO-2026-6209
Gogithub.com/traefik/traefik/v33.6.25GHSA-fgjj-px3w-67xx
Gogithub.com/traefik/traefik/v33.7.10GHSA-fgjj-px3w-67xx
Gogithub.com/traefik/traefik/v33.6.25, 3.7.10GO-2026-6209

Affected products (as reported)

VendorProductVersions
traefik traefik >= 3.0.0, < 3.6.25>= 3.7.0, < 3.7.10

Weakness: CWE-694 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References