CVE-2026-119572

Name of the Vulnerable Software and Affected Versions Traefik versions 3.7.0-ea.1 through 3.7.14

Description An authentication bypass exists in the Kubernetes Ingress NGINX provider. The issue occurs when mTLS (mutual TLS, a process where both client and server authenticate each other) configured via the auth-tls-secret annotation is silently disabled. This happens if another Ingress declares a path on the same host without matching auth-tls settings, causing the system to fall back to default TLS options and allowing unauthenticated attackers to access backends that require client certificates.

Recommendations Update Traefik to version 3.7.15.