Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted header name in an HTTP/1.1 chunked trailer or an HTTP/2 trailer. When the retry or buffering middleware reads the body before the reverse proxy clones the request, the attacker-controlled trailer value reaches a backend that merges trailers into the header namespace, bypassing the documented delete or reject behavior and potentially spoofing identity or forwarded routing data. This issue is fixed in 3.7.13.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Traefik is an open source HTTP reverse proxy and load balancer. From 3.2.0 until 3.7.13, Traefik
    entrypoint defenses aliasHeadersStrategy, underscoreHeadersStrategy, and forwardedHeaders inspect
    req.Header but not req.Trailer, allowing an unauthenticated client to submit an aliasing or trusted header
    name in an HTTP/1.1 chunked trailer or an HTTP/2 trailer. When the retry or buffering middleware reads the
    body before the reverse proxy clones the request, the attacker-controlled trailer value reaches a backend
    that merges trailers into the header namespace, bypassing the documented delete or reject behavior and
    potentially spoofing identity or forwarded routing data. This issue is fixed in 3.7.13. (CVE-2026-88004)

ID	Name	Product	Family	Type	Severity
458955	Echo: github.com/traefik/traefik/v3: security update to 3.7.13	Tenable Cloud Security	Echo Local Security Checks	Local	high
458955	Echo: github.com/traefik/traefik/v3: security update to 3.7.13	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
447921	SCA: security update for github.com/traefik/traefik/v3 (GHSA-v67p-phpq-fc8x)	Tenable Cloud Security	SCA Checks	Local	high
447921	SCA: security update for github.com/traefik/traefik/v3 (GHSA-v67p-phpq-fc8x)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-88004

high

Tenable Plugins

high

high

high

high