CVE-2021-32813

Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.4.13, there exists a potential header vulnerability in Traefik's handling of the Connection header. Active exploitation of this issue is unlikely, as it requires that a removed header would lead to a privilege escalation, however, the Traefik team has addressed this issue to prevent any potential abuse. If one has a chain of Traefik middlewares, and one of them sets a request header, then sending a request with a certain Connection header will cause it to be removed before the request is sent. In this case, the backend does not see the request header. A patch is available in version 2.4.13. There are no known workarounds aside from upgrading.

• CWE-913
• CWE-913

• https://github.com/traefik/traefik/pull/8319/commits/cbaf86a93014a969b8accf39301932c17d0d73f9Patch, Third Party Advisory
• https://github.com/traefik/traefik/releases/tag/v2.4.13Third Party Advisory
• https://github.com/traefik/traefik/security/advisories/GHSA-m697-4v8f-55qgThird Party Advisory
• https://github.com/traefik/traefik/pull/8319/commits/cbaf86a93014a969b8accf39301932c17d0d73f9Patch, Third Party Advisory
• https://github.com/traefik/traefik/releases/tag/v2.4.13Third Party Advisory
• https://github.com/traefik/traefik/security/advisories/GHSA-m697-4v8f-55qgThird Party Advisory

Published

Aug 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32808ckeditor is an open source WYSIWYG HTML editor with rich con…5.4
• CVE-2021-32809ckeditor is an open source WYSIWYG HTML editor with rich con…5.4
• CVE-2021-3281In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 befo…5.3
• CVE-2021-32810crossbeam-deque is a package of work-stealing deques for bui…9.8
• CVE-2021-32811Zope is an open-source web application server. Zope versions…7.2
• CVE-2021-32812Monkshu is an enterprise application server for mobile apps …6.1
• CVE-2021-32814Skytable is a NoSQL database with automated snapshots and TL…8.1
• CVE-2021-32815Exiv2 is a command-line utility and C++ library for reading,…5.5
• CVE-2021-32816ProtonMail Web Client is the official AngularJS web client f…7.5
• CVE-2021-32817express-hbs is an Express handlebars template engine. expres…6.8
• CVE-2021-32818haml-coffee is a JavaScript templating solution. haml-coffee…5.4
• CVE-2021-32819Squirrelly is a template engine implemented in JavaScript th…8.8