CVE-2025-47952CRITICAL 9.1EPSS p51.2%

CVE-2025-47952CVE-2025-47952

Description

Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a matcher based on the path, if the URL contains a URL encoded string in its path, it’s possible to target a backend, exposed using another router, by-passing the middlewares chain. This issue has been patched in versions 2.11.25 and 3.4.1.

Scoring

CVSS 3.19.1 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS0.78% probability of exploitation · percentile 51.2% · 2026-06-19T12:03:05Z
Published2025-05-30
Last modified2025-11-25

Underlying weaknesses· 1

CWE-22

References

  1. https://github.com/traefik/traefik/commit/08d5dfee0164aa54dd44a467870042e18e8d3f00
  2. https://github.com/traefik/traefik/releases/tag/v2.11.25
  3. https://github.com/traefik/traefik/releases/tag/v3.4.1
  4. https://github.com/traefik/traefik/security/advisories/GHSA-vrch-868g-9jx5

1

TypeTargetConfidenceTier
WeaknessImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')cwe-220%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-32431
CVE
CVE-2026-40912
CVE
CVE-2026-35051
CVE
CVE-2026-39858
CVE
CVE-2025-54386
CVE
CVE-2026-44774
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.