Database/Container, Kubernetes & orchestration
Traefik: A tenant with HTTPRoute write access injects backtick-delimited rule tokens into Traefik's router
CVE-2026-29777Container, Kubernetes & orchestrationcurated
Impact
A tenant with HTTPRoute write access injects backtick-delimited rule tokens into Traefik's router rule language; cross-tenant route hijack
Who can reach it
Cluster user with namespace access
What to do
Rolling Traefik upgrade to 3.6.10+
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.