CLEANSTART-2026-ZM51402: Traefik before v2

Q: Does exploitation require authentication or user interaction?

No. The provided vector indicates network reachability, low attack complexity, no privileges required, and no user interaction required.

Q: What is the expected security impact if exploitation succeeds?

The vulnerability is rated high severity (8.2) with high confidentiality and integrity impact. Availability impact is rated as none.

Q: Which deployments should be prioritized for remediation?

Deployments using affected Traefik versions before v2 should be prioritized, particularly where the service is reachable over the network.

Published Nov 11, 2026

Updated

Security vulnerability affects the traefik package. Traefik before v2.

Affected Software

1 affected componentFixes available

cleanstart/traefik<3.4.5-r7

3.4.5-r7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/traefik to a version that resolves this vulnerability.
Fixed in 3.4.5-r7

Event History

Nov 11, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-85597

Frequently Asked Questions

Does exploitation require authentication or user interaction?

No. The provided vector indicates network reachability, low attack complexity, no privileges required, and no user interaction required.

What is the expected security impact if exploitation succeeds?

The vulnerability is rated high severity (8.2) with high confidentiality and integrity impact. Availability impact is rated as none.

Which deployments should be prioritized for remediation?

Deployments using affected Traefik versions before v2 should be prioritized, particularly where the service is reachable over the network.

CLEANSTART-2026-ZM51402: Traefik before v2

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Does exploitation require authentication or user interaction?

What is the expected security impact if exploitation succeeds?

Which deployments should be prioritized for remediation?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require authentication or user interaction?

What is the expected security impact if exploitation succeeds?

Which deployments should be prioritized for remediation?