etcd-io etcd
13 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-73500 | < 3.5.33 ; >= 3.6.0, < 3.6.14 ; >= 3.7.0-alpha.0, < 3.7.1 | etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline | HIGH 8.7 | 0.4 % | ||
| CVE-2026-73499 | < 3.5.33 ; >= 3.6.0, < 3.6.14 ; >= 3.7.0-alpha.0, < 3.7.1 | etcd: Watch API authorization bypass via open-ended range requests | HIGH 7.1 | 0.7 % | ||
| CVE-2026-59818 | >= 3.6.0-alpha.0, < 3.6.13 ; < 3.5.32 | etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation | HIGH 8.1 | 0.4 % | ||
| CVE-2026-44283 | < 3.4.44 ; >= 3.5.0, <= 3.5.29 ; >= 3.6.0, <= 3.6.10 | etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-33413 | >= 3.6.0-alpha.0, < 3.6.9 ; >= 3.5.0-alpha.0, < 3.5.28 ; < 3.4.42 | etcd: Authorization bypasses in multiple APIs | HIGH 8.8 | 0.3 % | ||
| CVE-2026-33343 | >= 3.5.0-alpha.0, < 3.5.28 ; >= 3.6.0-alpha.0, < 3.6.9 ; < 3.4.42 | etcd: Nested etcd transactions bypass RBAC authorization checks | MEDIUM 6.5 | 0.2 % | ||
| CVE-2023-32082 | < 3.4.26 ; >= 3.5.0, < 3.5.9 | etcd key name can be accessed via LeaseTimeToLive API | MEDIUM 4.3 | 0.7 % | ||
| CVE-2020-15136 | >= 3.4.0, < 3.4.10 ; < 3.3.23 | Improper authentication in etcd | MEDIUM 6.5 | 1.7 % | ||
| CVE-2020-15114 | < 3.3.23 ; < 3.4.10 | Denial of Service in etcd | HIGH 7.7 | 1.1 % | ||
| CVE-2020-15115 | < 3.3.23 ; < 3.4.10 | No minimum password length in etcd | HIGH 7.5 | 1.3 % | ||
| CVE-2020-15112 | < 3.3.23 ; < 3.4.10 | Improper Input Validation in etcd | MEDIUM 6.5 | 1.3 % | ||
| CVE-2020-15113 | < 3.3.23 ; < 3.4.10 | Improper Preservation of Permissions in etcd | HIGH 7.1 | 0.2 % | ||
| CVE-2020-15106 | < 3.3.23 ; < 3.4.10 | Improper Input Validation in etcd | MEDIUM 6.5 | 1.3 % |