CVE-2026-71327

[CVE catalog]

Severity

High · CVSS 8.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Published

Aug 6, 2026, 4:38:11 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.48% · Oct 27, 2026

A flaw was found in Traefik, an open-source HTTP reverse proxy and load balancer. Its Kubernetes Gateway API provider incorrectly generates unique identifiers for routes and services. This vulnerability allows an attacker to create conflicting routes, which can then overwrite the backend services of another isolated environment (namespace). This could lead to unauthorized control over services in different namespaces. github.com/traefik/traefik: Traefik: Cross-namespace backend hijacking due to Gateway API identity collision A flaw in Traefik's Kubernetes Gateway API provider allows a lower-privileged tenant to overwrite backend routing rules across namespace boundaries. Due to deterministic route identity generation concatenating namespace, route name, Gateway identity, entry point, and rule index using hyphens, identical generated string identifiers result in name collisions. An authenticated attacker can exploit these predictable identifiers to deploy conflicting HTTPRoute, GRPCRoute, TCPRoute, or TLSRoute objects, effectively hijacking, rerouting, or disrupting backend service traffic intended for isolated namespaces. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.