GO-2026-4808

Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd

En bref

Publiée
Mise à jour
CVE
CVE-2026-33343
Alias
BIT-etcd-2026-33343, GHSA-rfx7-8w68-q57q

Description

Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd

Paquets affectés

PaquetVersions
Go · go.etcd.io/etcdintroduced 0
Go · go.etcd.io/etcd/v3introduced 0, fixed 3.4.42, introduced 3.5.0-alpha.0, fixed 3.5.28, introduced 3.6.0-alpha.0, fixed 3.6.9

Références

Sources

SourceLicence
OSV.devCC-BY 4.0 — Go Vulnerability Database