CVE-2026-25949 | Traefik up to 3.6.7 readTimeout resource consumption

18:55 - 12 Feb 2026

A vulnerability identified as problematic has been detected in Traefik up to 3.6.7. Affected is the function readTimeout. Performing a manipulation results in resource consumption. This vulnerability is known as CVE-2026-25949. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.