PT-2026-80360

In go.etcd.io/etcd/server/v3 before 3.5.33, 3.6.14, and 3.7.1, an authenticated user with READ permission on a single key can bypass RBAC restrictions by initiating an open-ended range watch using clientv3.WithFromKey. The Watch RPC handler normalized open-ended range ends prior to authorization...

GO-2026-5024 vulnerabilities

Vulnerabilities for packages: containerd, knative-operator-fips, net-kourier-fips, trino, kube-conformance, upwind-agent, kubeflow-katib, commercial-kyverno, etcd-fips, helm, gitlab-rails-ce, k3s, gitlab-workhorse-ce, kyverno, etcd, gitlab-rails-ce-fips...

GO-2021-0077 vulnerabilities

Vulnerabilities for packages: etcd-fips, etcd...

GO-2026-4808 vulnerabilities

Vulnerabilities for packages: juicefs, etcd...

GO-2026-4806 vulnerabilities

Vulnerabilities for packages: juicefs, etcd...

GO-2024-2528 vulnerabilities

Vulnerabilities for packages: dgraph, etcd, etcd-fips...

GO-2020-0005 vulnerabilities

Vulnerabilities for packages: dgraph, etcd, etcd-fips...

GO-2024-2529 vulnerabilities

Vulnerabilities for packages: dgraph, etcd, etcd-fips...

GO-2024-2530 vulnerabilities

Vulnerabilities for packages: juicefs, dgraph, etcd, etcd-fips...

GO-2026-5736 vulnerabilities

Vulnerabilities for packages: multicluster-controlplane, dapr-fips, kcp, kcp-fips, dapr, rancher-support-bundle-kit, multicluster-controlplane-fips, milvus, juicefs, etcd...

GO-2025-4116 vulnerabilities

Vulnerabilities for packages: backup-restore-operator, rke2-runtime-fips, terraform, vault, falco-no-driver, kube-conformance, consul-k8s, etcd-fips, cert-manager-fips, k3s, gitlab-rails-ce, etcd, gitlab-rails-ce-fips...

GO-2026-5025 vulnerabilities

Vulnerabilities for packages: prometheus, containerd, prometheus-fips, net-kourier-fips, ory-kratos-fips, karpenter-fips, k6-fips, prometheus-operator, falco-no-driver, cilium-envoy-fips, etcd, virt-operator-fips, crossplane-provider-azure-network, knative-net-istio, upwind-agent, fq,...

GO-2026-5016 vulnerabilities

Vulnerabilities for packages: prometheus, containerd, prometheus-fips, gomplate, clickhouse-backup-fips, chezmoi, cloudbeat, prometheus-operator, keda-fips, terragrunt, coder, kube-arangodb-fips, gomplate-fips, falco-no-driver, grype, chisel-fips, dagger, etcd, osv-scanner, splunk-otel-collector,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: tkn, openbao-fips, opentelemetry-collector-contrib-fips, azure-aad-pod-identity-mic, rclone, azuredisk-csi, flux-image-reflector-controller-fips, flyte, temporal-fips, etcd, nuclei, mc-fips, flux-source-controller, eks-distro-fips,...

etcd: etcd: Authorization bypass allows information disclosure and denial of service

A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lea...

SUSE CVE-2026-73499

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a user granted READ permission on a single exact key can use the Watch gRPC API with clientv3.WithFromKey to receive watch events for every key lexicographically greater than o...

SUSE CVE-2026-73500

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...

CLEANSTART-2026-QI34417 Security fixes in etcd-fips 3.6.13-r1

Package etcd-fips version 3.6.13-r1 fixes 2 vulnerabilities: CVE-2026-46600, ghsa-5cv4-jp36-h3mw...

Linux Distros Unpatched Vulnerability : CVE-2026-73499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a user granted READ permission on a...

Linux Distros Unpatched Vulnerability : CVE-2026-73500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etc...