CyberRota Analysis
AI-GeneratedTraefik versions prior to v2.11.55 are vulnerable to an authentication bypass in the digestAuth middleware, allowing attackers to exploit the flaw by receiving an empty secret for unknown usernames. This enables unauthorized access to any route protected by digestAuth, as attackers can generate valid digest responses using arbitrary credentials. Organizations utilizing affected Traefik versions should prioritize immediate updates to mitigate this critical security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Traefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an authentication bypass vulnerability in the digestAuth middleware where unknown usernames receive an empty secret instead of rejection. Attackers can compute a valid digest response using the empty secret and arbitrary credentials to bypass authentication on any digestAuth-protected route without a valid username or password.