GHSA-RFX7-8W68-Q57Q etcd: Nested etcd transactions bypass RBAC authorization checks
Impact What kind of vulnerability is it? Who is impacted? An authenticated user with RBAC restricted permissions on key ranges can use nested transactions to bypass all key-level authorization. This allows any authenticated user with direct access to etcd to effectively ignore all key range...