CVE-2026-85597: Traefik Tls Conflict Default Fallback

Router TLS conflict resolution falls back to default TLS configuration without failing closed, potentially allowing security policy downgrade or mTLS bypass.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Go
greprules fetch cve-2026-85597-traefik-tls-conflict-default-fallback --engine opengrep

Description

Router TLS conflict resolution falls back to default TLS configuration without failing closed, potentially allowing security policy downgrade or mTLS bypass.