THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-62fc-8686-hfmq (medium) — Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef

[GHSA] GHSA-62fc-8686-hfmq (medium) — Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef

medgithub_advisoriesPublished 2026-08-06

GHSA-62fc-8686-hfmq Severity: medium CVE: CVE-2026-71325

Traefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef

## Summary

There is a medium severity vulnerability in Traefik's Kubernetes CRD provider. When `providers.kubernetesCRD.allowCrossNamespace` is disabled — the default — cross-namespace `@kubernetescrd` references are rejected for middlewares, TLS op

Indicators of compromise

CVE-2026-71325cve
CVE-2026-41174cve

Original source: https://github.com/advisories/GHSA-62fc-8686-hfmq