CVE-2025-54386

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-54386
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-54386.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-54386
Aliases
Downstream
Related
Published
2025-08-01T23:32:21.747Z
Modified
2026-02-04T04:12:27.525640Z
Severity
  • 7.3 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L CVSS Calculator
Summary
Traefik's Client Plugin is Vulnerable to Path Traversal, Arbitrary File Overwrites and Remote Code Execution
Details

Traefik is an HTTP reverse proxy and load balancer. In versions 2.11.27 and below, 3.0.0 through 3.4.4 and 3.5.0-rc1, a path traversal vulnerability was discovered in WASM Traefik’s plugin installation mechanism. By supplying a maliciously crafted ZIP archive containing file paths with ../ sequences, an attacker can overwrite arbitrary files on the system outside of the intended plugin directory. This can lead to remote code execution (RCE), privilege escalation, persistence, or denial of service. This is fixed in versions 2.11.28, 3.4.5 and 3.5.0.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54386.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-22",
        "CWE-30"
    ]
}
References

Affected packages

Git / github.com/traefik/traefik

Affected ranges

Type
GIT
Repo
https://github.com/traefik/traefik
Events
Introduced
9862cd67808ea88bf5649fd7cc942732a0f06a53
Fixed
77ef7fe490994d83b3d692e6b52f15db4c37e4b4

Affected versions

v2.*
v2.11.27
v3.*
v3.4.4
v3.5.0-rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-54386.json"