{"id":"CVE-2026-119572","aliases":["GHSA-p8wx-ph99-xgcr"],"url":"https://o3.security/vulnerability/CVE-2026-119572","summary":"Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider","details":"Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX provider that silently disables mTLS configured via the auth-tls-secret annotation. When another Ingress declares a path on the same host without matching auth-tls settings, Traefik falls back to default TLS options, letting unauthenticated attackers reach backends requiring client certificates.","published":"2026-10-30T13:18:11.594Z","modified":"2026-10-31T02:47:38.151684333Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/119xxx/CVE-2026-119572.json"},{"type":"ADVISORY","url":"https://github.com/traefik/traefik/security/advisories/GHSA-p8wx-ph99-xgcr"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119572"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/traefik-3.7.0-ea.1-before-3.7.15-mtls-bypass-via-ingress-nginx-provider"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-31T02:47:38.151684333Z"}}