CVE-2025-66491
Medium · 5.9CVSS
5.9
EPSS
0.2%
Published
Dec 9, 2025
CISA due date
—
The record
Traefik has Inverted TLS Verification Logic in its ingress-nginx Provider
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/traefik/traefik | 0 | No fix |
| Go | github.com/traefik/traefik/v2 | 0 | No fix |
| Go | github.com/traefik/traefik/v3 | 3.5.0 | 3.6.3 |
| go | github.com/traefik/traefik/v3 | 3.5.0 | 3.6.3 |
| openSUSE:Leap 15.6 | govulncheck-vulndb | 0 | 0.0.20251230T014957-150000.1.134.1 |
| openSUSE:Tumbleweed | traefik | 0 | 3.6.6-1.1 |
Related vulnerabilities
- GO-2025-4205 Traefik Inverted TLS Verification Logic in ingress-nginx Provider in… Same vulnerability
- GO-2026-4530 Traefik affected by TLS ClientAuth Bypass on HTTP/3 in github.com/traefik/traefik Also affects github.com/traefik/traefik
- GO-2026-4484 Traefik: TCP readTimeout bypass via STARTTLS on Postgres in github.com/traefik/traefik Also affects github.com/traefik/traefik
- CVE-2026-25949 Traefik is an HTTP reverse proxy and load balancer. Also affects github.com/traefik/traefik
- GO-2026-4322 Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall in… Also affects github.com/traefik/traefik
- CVE-2026-22045 Traefik's ACME TLS-ALPN fast path lacks timeouts and close on handshake stall Also affects github.com/traefik/traefik
- GO-2025-4206 Path Normalization Bypass in Traefik Router + Middleware Rules in… Also affects github.com/traefik/traefik
- CVE-2025-66490 Traefik is an HTTP reverse proxy and load balancer. Also affects github.com/traefik/traefik