Skip to main content

PREQUEL-2025-0074

Traefik License ExpiredLow
Impact: 8/10
Mitigation: 1/10

PREQUEL-2025-0074View on GitHub

Description

Traefik Enterprise (or Traefik Hub-enabled Proxy) periodically\n“pings” Traefik’s SaaS platform to validate the node-level licence\ntoken. \nWhen the licence or trial period lapses the process logs\n\n```\nUnable to ping platform error=\"your trial or license expired, contact\nsales if you want to enable your account\"\n```\n\nand disables all commercial-only features (dashboards, enterprise\nplugins, distributed rate-limits, Hub service directory). Plain\nreverse-proxy routes may continue for a short grace period, but new\nconfiguration reloads are rejected.\n

Mitigation

1. **Install a valid licence file or token** \n *Kubernetes example* (Helm values):\n ```yaml\n additionalSecret:\n name: traefik-license\n data:\n licenseKey: \"<base64-encoded-string>\"\n ```\n then `helm upgrade traefik traefik/traefik-enterprise -f values.yaml`\n2. **Renew subscription** in the Traefik Cloud portal and download\n the updated key.\n

References