{"action":"Upgrade go.etcd.io/etcd/server/v3 to 3.5.30 or later.","affected":[{"fixed":"3.5.30","introduced":"3.5.0"},{"fixed":"3.6.11","introduced":"3.6.0"}],"component":"go.etcd.io/etcd/server/v3","cve_ids":["CVE-2026-44283"],"ecosystem":"Go","epss":0.00225,"exploited":false,"fixed_versions":["3.5.30","3.6.11"],"ghsa_id":"GHSA-x35m-3gp4-4fh5","id":"tcs_01M5KGPFHP7AZNDP1F1HTAB219","modified_at":"2026-07-25T15:44:46.961229468Z","published_at":"2026-07-24T18:35:55Z","references":["https://osv.dev/vulnerability/GO-2026-5736","https://github.com/etcd-io/etcd/security/advisories/GHSA-x35m-3gp4-4fh5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-5736","url":"https://osv.dev/vulnerability/GO-2026-5736"}],"summary":"Etcd RBAC bypass via PrevKv/lease in nested transactions in go.etcd.io/etcd/v3 in go.etcd.io/etcd/server"}