CVE-2026-85597

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.55

Description A TLS option conflict resolution issue allows unauthenticated attackers to bypass client-certificate authentication on multi-host routers. By creating conflicting TLS options across multiple hostnames within a single router rule, the strict mTLS (mutual TLS, a process where both client and server authenticate each other) requirement falls back to default options for all hosts, granting access to protected backends.

Recommendations Update to version 2.11.55 or later.