THREAT OPS › Threat News › [GHSA] GHSA-42cj-m3vj-89wv (medium) — Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass
[GHSA] GHSA-42cj-m3vj-89wv (medium) — Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass
GHSA-42cj-m3vj-89wv Severity: medium CVE: CVE-2026-65602
Traefik CRD IngressRouteTCP ServersTransport Cross-Provider Namespace Bypass
## Summary
There is a medium-severity cross-provider reference vulnerability in Traefik's Kubernetes CRD provider. The `crossProviderNamespaces` allowlist is enforced for HTTP `serversTransport` references but was not enforced for `IngressRouteTCP` service `serve
Indicators of compromise
- 26c96a3935cafb473f4a5bae1886560d9aa4e4f0sha1
- CVE-2026-65602cve
- k8s.iodomain
- traefik.iodomain
- foo.comdomain
Original source: https://github.com/advisories/GHSA-42cj-m3vj-89wv