—
GO-2026-5736
Etcd RBAC bypass via PrevKv/lease in nested transactions in go.etcd.io/etcd/v3 in go.etcd.io/etcd/server
Quick fix
GO-2026-5736 — go.etcd.io/etcd/server/v3: upgrade to the fixed version with the command below.
go get go.etcd.io/etcd/server/v3@v3.5.30Details
Etcd RBAC bypass via PrevKv/lease in nested transactions in go.etcd.io/etcd/v3 in go.etcd.io/etcd/server
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / go.etcd.io/etcd/server/v3
Introduced in:
3.5.0 Fixed in: 3.5.30 Fix
go get go.etcd.io/etcd/server/v3@v3.5.30