CVE-2026-114642
- Source
- https://cve.org/CVERecord?id=CVE-2026-114642
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114642.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-114642
- Aliases
-
- GHSA-cw35-4q88-3rmp
- Published
- 2026-10-22T01:43:41Z
- Modified
- 2026-10-22T10:45:53Z
- Severity
-
- 7.0 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N CVSS Calculator
- Summary
- Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper
- Details
-
Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connection slot not keyed by ServersTransport, so one service's TLS client configuration is reused for another service's backend. An unauthenticated client can arm the slot via a backend issuing an NTLM or Negotiate challenge, then reach another service on the same keep-alive connection, bypassing its root CAs, server name, and certificate verification.
- Database specific
{ "cna_assigner": "VulnCheck", "cwe_ids": [ "CWE-295" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114642.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114642.json
- https://github.com/traefik/traefik/security/advisories/GHSA-cw35-4q88-3rmp
- https://nvd.nist.gov/vuln/detail/CVE-2026-114642
- https://www.vulncheck.com/advisories/traefik-before-2.11.58-and-3.7.14-tls-config-bypass-via-ntlm-kerberos-round-tripper
Affected packages
Git / github.com/traefik/traefik
Affected ranges
- Type
- GIT
- Repo
- https://github.com/traefik/traefik
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "2.11.0" }, { "fixed": "2.11.58" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "introduced": "3.0.0" }, { "fixed": "3.7.14" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" } ] }
Affected versions
v2.*
v2.11.0
v2.11.1
v2.11.10
v2.11.11
v2.11.12
v2.11.13
v2.11.14
v2.11.15
v2.11.16
v2.11.17
v2.11.18
v2.11.19
v2.11.2
v2.11.20
v2.11.21
v2.11.22
v2.11.23
v2.11.24
v2.11.25
v2.11.26
v2.11.27
v2.11.28
v2.11.29
v2.11.3
v2.11.30
v2.11.31
v2.11.32
v2.11.33
v2.11.34
v2.11.35
v2.11.36
v2.11.37
v2.11.38
v2.11.39
v2.11.4
v2.11.40
v2.11.41
v2.11.42
v2.11.43
v2.11.44
v2.11.45
v2.11.46
v2.11.47
v2.11.48
v2.11.49
v2.11.5
v2.11.50
v2.11.51
v2.11.52
v2.11.53
v2.11.54
v2.11.55
v2.11.56
v2.11.57
v2.11.6
v2.11.7
v2.11.8
v2.11.9