Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-71325 · CVE overview and exploitation status

EUVD-2026-54293

GHSA-62fc-8686-hfmq

GO-2026-6203

cve-program · CVE-2026-71325

• https://github.com/traefik/traefik/security/advisories/GHSA-62fc-8686-hfmq
• https://github.com/traefik/traefik/commit/65ebf4b47fbdc33e3856803a5844a404e094d52d
• https://github.com/traefik/traefik/releases/tag/v2.11.54
• https://github.com/traefik/traefik/releases/tag/v3.6.25
• https://github.com/traefik/traefik/releases/tag/v3.7.10

euvd · EUVD-2026-54293

• https://github.com/traefik/traefik/security/advisories/GHSA-62fc-8686-hfmq
• https://github.com/traefik/traefik/commit/65ebf4b47fbdc33e3856803a5844a404e094d52d
• https://github.com/traefik/traefik/releases/tag/v2.11.54
• https://github.com/traefik/traefik/releases/tag/v3.6.25
• https://github.com/traefik/traefik/releases/tag/v3.7.10

nvd · CVE-2026-71325

• https://github.com/traefik/traefik/commit/65ebf4b47fbdc33e3856803a5844a404e094d52d
• https://github.com/traefik/traefik/releases/tag/v2.11.54
• https://github.com/traefik/traefik/releases/tag/v3.6.25
• https://github.com/traefik/traefik/releases/tag/v3.7.10
• https://github.com/traefik/traefik/security/advisories/GHSA-62fc-8686-hfmq

osv · GHSA-62fc-8686-hfmq

• https://github.com/traefik/traefik/security/advisories/GHSA-62fc-8686-hfmq
• https://github.com/traefik/traefik/commit/65ebf4b47fbdc33e3856803a5844a404e094d52d
• https://github.com/traefik/traefik
• https://github.com/traefik/traefik/releases/tag/v2.11.54
• https://github.com/traefik/traefik/releases/tag/v3.6.25
• https://github.com/traefik/traefik/releases/tag/v3.7.10

osv · GO-2026-6203

• https://github.com/traefik/traefik/security/advisories/GHSA-62fc-8686-hfmq
• https://github.com/traefik/traefik/commit/65ebf4b47fbdc33e3856803a5844a404e094d52d
• https://github.com/traefik/traefik/releases/tag/v2.11.54
• https://github.com/traefik/traefik/releases/tag/v3.6.25
• https://github.com/traefik/traefik/releases/tag/v3.7.10

• Traefik is an open-source edge router that makes publishing services a fun and easy experience. Prior to 2.11.54, 3.6.25, and 3.7.10, cross-namespace @kubernetescrd references are not rejected for TraefikService backend references resolved … · Advisory content revised · 1 Nov 2026