VULNRABLE / Vulnerability / CVE-2026-88009

CVE-2026-88009

HIGH LOW github.com/traefik/traefik/v3 GHSA

Exploit verdict: No active-exploit signal

CVSS Score

Severity

HIGH

EPSS

Source

GHSA

Summary

Traefik: Rootless HTTP/1 request-target routes as "/" but is forwarded verbatim, bypassing path-scoped routing, middleware guards and access logging

What this means

CVE-2026-88009 is a high-severity vulnerability affecting github.com/traefik/traefik/v3, rated CVSS 8. The EPSS model estimates a 0% probability of exploitation in the next 30 days. Published September 11, 2026.

View full advisory at GHSA →