CVE-2026-44283

Name of the Vulnerable Software and Affected Versions etcd versions prior to 3.4.44 etcd versions prior to 3.5.30 etcd versions prior to 3.6.11

Description etcd is a distributed key-value store for distributed system data. A flaw allows authenticated users without sufficient read or lease-related permissions to bypass Role-Based Access Control (RBAC) authorization checks. This occurs when invoking transaction operations that utilize read access via PrevKv or lease attachment in 'Put' requests, potentially allowing unauthorized data access or lease attachment.

Recommendations Update to version 3.4.44. Update to version 3.5.30. Update to version 3.6.11. Restrict network access to etcd server ports to ensure only trusted components can connect. Require strong client identity at the transport layer, such as mTLS with tightly scoped client certificate distribution.