CVE-2025-66490

Description

Path Normalization Bypass in Traefik Router + Middleware Rules in github.com/traefik/traefik

Affected packages (6)

• Go/github.com/traefik/traefikfrom 0, <= 1.7.34
• Go/github.com/traefik/traefikfrom 0
• Go/github.com/traefik/traefik/v2from 0, < 2.11.32
• Go/github.com/traefik/traefik/v2from 0, < 2.11.32
• Go/github.com/traefik/traefik/v3from 0, < 3.6.3
• Go/github.com/traefik/traefik/v3from 0, < 3.6.3

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-66490
• PATCHhttps://github.com/traefik/traefik
• WEBhttps://github.com/traefik/traefik/releases/tag/v2.11.32
• WEBhttps://github.com/traefik/traefik/releases/tag/v3.6.4
• WEBhttps://github.com/traefik/traefik/security/advisories/GHSA-gm3x-23wp-hc2c