Go/go.etcd.io/etcd/v3 CVE-2026-33413: high 8.8, EPSS 0.26%
etcd: Authorization bypasses in multiple APIs
Action: Upgrade go.etcd.io/etcd/v3 to 3.4.42 or later.
go get go.etcd.io/etcd/v3@v3.6.9go get go.etcd.io/etcd/v3@v3.5.28go get go.etcd.io/etcd/v3@v3.4.42Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.6.0-alpha.0 | 3.6.9 | - |
| 3.5.0-alpha.0 | 3.5.28 | - |
| 0 | 3.4.42 | - |
Fixed versions
| 3.6.9 | 3.5.28 | 3.4.42 |
Sources
- osv: GHSA-q8m4-xhhv-38mg
- nvd: CVE-2026-33413
- https://github.com/etcd-io/etcd/security/advisories/GHSA-q8m4-xhhv-38mg
- https://github.com/etcd-io/etcd
CVE-2026-33413 · published · modified · JSON