Vulnerability Description
Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cross-namespace check on the auth-tls-secret annotation when a cached client authentication TLS option is reused. Users who can create Ingresses can reference another namespace's CA secret already used by another Ingress, enforcing it on their own routes and learning whether it exists, without disclosure of its contents.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/traefik/traefik/security/advisories/GHSA-28hp-c82p-8vqj
- https://www.vulncheck.com/advisories/traefik-3.7.11-before-3.7.15-cross-namespac
FAQ
What is CVE-2026-119573?
CVE-2026-119573 is a vulnerability with a CVSS score of 4.4 (MEDIUM). Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the cross-namespace check on the auth-tls-secret annotation when a cached client authe...
How severe is CVE-2026-119573?
CVE-2026-119573 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-119573?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.