Is CVE-2026-112778 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-112778 being exploited in the wild.

How severe is CVE-2026-112778?

Informational severity, published 19 October 2026.

Which products and versions are affected?

Traefik 2.11.45 and earlier, 3.x before 3.6.17, 3.7.0.

Is there a fix for CVE-2026-112778?

Yes: fixed in 2.11.46; 3.6.17; 3.7.1. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-112778 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-112778?

Check whether you run Traefik at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-112778: Traefik Kubernetes Ingress missing namespace validation in annotations

CVE-2026-112778 · Severity: info · Published 2026-10-19

Traefik is a reverse proxy and load balancer that routes network traffic in Kubernetes environments. The Kubernetes Ingress provider lacks namespace validation on resource annotations, allowing attackers with permission to create Ingress or Service resources to reference Middlewares, ServersTransports, and TLSOptions from other namespaces. This bypasses tenant isolation and could expose other tenants' secrets, such as API credentials or client certificates.

Technologies: Traefik. Vendors: Traefik.

Quick answers

Is CVE-2026-112778 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-112778 being exploited in the wild.
How severe is CVE-2026-112778?: Informational severity, published 19 October 2026.
Which products and versions are affected?: Traefik 2.11.45 and earlier, 3.x before 3.6.17, 3.7.0.
Is there a fix for CVE-2026-112778?: Yes: fixed in 2.11.46; 3.6.17; 3.7.1. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-112778 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-112778?: Check whether you run Traefik at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 2.11.46; 3.6.17; 3.7.1

Technical details

The vulnerability is a missing namespace validation flaw in Traefik's Kubernetes Ingress provider when processing annotations on Ingress and Service resources. Unlike the CRD provider which enforces allowCrossNamespace checks, annotations are not validated and allow cross-namespace references to Middlewares, ServersTransports, and TLSOptions. An attacker with namespace-level permission to create or modify Ingress/Service resources can craft annotations referencing resources in other namespaces to steal credentials, certificates, or forward-auth tokens.

Affected products

Traefik Traefik 2.11.45 and earlier, 3.x before 3.6.17, 3.7.0

Timeline

2026-10-05: disclosed
2026-10-19: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.