BIT-ETCD-2026-73499 etcd: Watch API authorization bypass via open-ended range requests

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a user granted READ permission on a single exact key can use the Watch gRPC API with clientv3.WithFromKey to receive watch events for every key lexicographically greater than o...

CVE-2026-66782: Improper Privilege Management

A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account SA bearer token within the Submariner Custom Resource CR specification. An attacker with access to the cluster's etcd database or through kubectl get commands could obtai...

PT-2026-79902

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a user granted READ permission on a single exact key can use the Watch gRPC API with clientv3.WithFromKey to receive watch events for every key lexicographically greater than o...

PT-2026-77226

Name of the Vulnerable Software and Affected Versions Submariner operator affected versions not specified Description A flaw in the Submariner operator allows a long-lived broker service account SA bearer token to be exposed within the Submariner Custom Resource CR specification. An attacker with...

GO-2026-5024 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, trino, kyverno, commercial-kyverno, knative-operator-fips, etcd-fips, kube-conformance, net-kourier-fips, containerd, gitlab-workhorse-ce, gitlab-rails-ce-fips, helm, k3s, upwind-agent, etcd, kubeflow-katib...

GO-2026-4808 vulnerabilities

Vulnerabilities for packages: etcd, juicefs...

GO-2026-4806 vulnerabilities

Vulnerabilities for packages: etcd, juicefs...

GO-2021-0077 vulnerabilities

Vulnerabilities for packages: etcd, etcd-fips...

GO-2024-2529 vulnerabilities

Vulnerabilities for packages: dgraph, etcd, etcd-fips...

GO-2020-0005 vulnerabilities

Vulnerabilities for packages: dgraph, etcd, etcd-fips...

GO-2024-2530 vulnerabilities

Vulnerabilities for packages: dgraph, etcd, etcd-fips, juicefs...

GO-2024-2528 vulnerabilities

Vulnerabilities for packages: dgraph, etcd, etcd-fips...

GO-2026-5736 vulnerabilities

Vulnerabilities for packages: multicluster-controlplane, dapr, milvus, kcp-fips, kcp, juicefs, multicluster-controlplane-fips, rancher-support-bundle-kit, etcd, dapr-fips...

GO-2025-4116 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, falco-no-driver, backup-restore-operator, cert-manager-fips, vault, etcd-fips, kube-conformance, consul-k8s, rke2-runtime-fips, terraform, gitlab-rails-ce-fips, k3s, etcd...

GO-2026-5025 vulnerabilities

Vulnerabilities for packages: argo-workflows, knative-eventing, vault-fips, external-secrets-operator, kube-conformance, crossplane-provider-azure-servicefabric, crossplane-provider-aws-elasticache, k3s, k6-fips, argo-cd, step, crossplane-provider-azure-storage, gitea-fips, gitlab-rails-ce,...

GO-2026-5016 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, terragrunt-fips, cilium, argo-workflows, argo-workflows-fips, coder-fips, vault-fips, external-secrets-operator, kube-conformance, tekton-pipelines, gitlab-runner-fips, podman-fips, kube-state-metrics, k3s, docker-machine-driver-harvester,...

GO-2024-3250 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, argo-workflows, argo-workflows-fips, kubernetes-dashboard-auth-fips, rclone, temporal-server, k3s, azcopy, falcoctl, temporal-fips, neuvector, argo-events, argo-cd, buildkitd-fips, falcoctl-fips, flux-notification-controller, boring-registry,...

etcd: etcd: Authorization bypass allows information disclosure and denial of service

A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lea...

SUSE CVE-2026-73499

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a user granted READ permission on a single exact key can use the Watch gRPC API with clientv3.WithFromKey to receive watch events for every key lexicographically greater than o...

SUSE CVE-2026-73500

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...