CVE-2026-85597
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 04, 2026
Vendor
unknown
Description
Traefik before v2.11.55 contains a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiting shared TLS resolution across multiple hostnames in a single router rule, causing the strict mTLS requirement to fall back to default options for all hosts.