CVE-2026-88009 — Traefik forwards a rootless opaque request target that routing/forwardAuth see as '/'. Auth bypass + access-log evasion, verified v3.7.10 / v3.7.13.
-
Updated
Oct 25, 2026 - Python
#
path-bypass
Here is 1 public repository matching this topic...
Add this topic to your repo
To associate your repository with the path-bypass topic, visit your repo's landing page and select "manage topics."