A critical path traversal vulnerability in Traefik allows unauthenticated attackers to bypass security controls and access sensitive system files.

This is a path traversal vulnerability, classified as CWE-22, occurring in the rewrite target functionality. It allows an unauthenticated attacker to manipulate file paths and bypass established authentication mechanisms.

This vulnerability could allow an attacker to read sensitive configuration files or access restricted system resources, leading to full system compromise. The CVSS score of 7.8 indicates a high severity risk that could result in severe data breaches or unauthorized access to backend services.

Immediate Action: Upgrade Traefik to the latest stable version where the path traversal vulnerability is patched.

Proactive Monitoring: Inspect access logs for path traversal attempts, such as requests containing sequences like ../, and monitor for unauthorized access to sensitive internal endpoints.

Compensating Controls: Use a WAF to filter and block incoming requests containing directory traversal sequences or unauthorized access attempts to internal management paths.

Public Exploit Available: Unknown

Traefik is a critical infrastructure component, and vulnerabilities allowing authentication bypass must be addressed immediately. Administrators should verify their current deployment version and apply the necessary security updates to prevent unauthorized access.