CERT24CVE-2026-114637 — Traefik v3.2.0 before v3.7.14: FastProxy NTLM/Negotiate Connection Pool Identity LeakLoading data…
CERT24Threat Observatory
Period

CVE-2026-114637 — Traefik v3.2.0 before v3.7.14: FastProxy NTLM/Negotiate Connection Pool Identity Leak

Traefik versions from v3.2.0 before v3.7.14 contain an authentication bypass vulnerability in the experimental FastProxy connection pool. NTLM- or Negotiate-authenticated backend connections are not correctly pinned to their frontend connection.

← Back to intelligence

CVE-2026-114637 — Traefik v3.2.0 before v3.7.14: FastProxy NTLM/Negotiate Connection Pool Identity Leak

Traefik versions from v3.2.0 before v3.7.14 contain an authentication bypass vulnerability in the experimental FastProxy connection pool. NTLM- or Negotiate-authenticated backend connections are not correctly pinned to their frontend connection.