CLEANSTART-2026-LB92546: Traefik is an HTTP reverse proxy and load balancer

Q: What level of access does an attacker need to exploit this issue?

The severity vector indicates network-based exploitation with low attack complexity. It does not require prior privileges or user interaction.

Q: What is the expected security impact?

The provided severity vector indicates a high availability impact, with no indicated confidentiality or integrity impact. This suggests the primary concern is service disruption.

Q: Can I determine whether my installed package version is affected from this advisory?

No affected version range or fixed version is provided in the available data. You can identify the relevant package as cleanstart/traefik, but version-level applicability cannot be confirmed from this advisory alone.

Published Nov 11, 2026

Updated

Security vulnerability affects the traefik package. Traefik is an HTTP reverse proxy and load balancer.

Affected Software

1 affected componentFixes available

cleanstart/traefik<3.4.5-r7

3.4.5-r7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/traefik to a version that resolves this vulnerability.
Fixed in 3.4.5-r7

Event History

Nov 11, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-25949

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The severity vector indicates network-based exploitation with low attack complexity. It does not require prior privileges or user interaction.

What is the expected security impact?

The provided severity vector indicates a high availability impact, with no indicated confidentiality or integrity impact. This suggests the primary concern is service disruption.

Can I determine whether my installed package version is affected from this advisory?

No affected version range or fixed version is provided in the available data. You can identify the relevant package as cleanstart/traefik, but version-level applicability cannot be confirmed from this advisory alone.

CLEANSTART-2026-LB92546: Traefik is an HTTP reverse proxy and load balancer

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected security impact?

Can I determine whether my installed package version is affected from this advisory?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the expected security impact?

Can I determine whether my installed package version is affected from this advisory?