Go/go.etcd.io/etcd

Etcd Gateway can include itself as an endpoint resulting in resource exhaustion

Modified: 9/10/2026

go.etcd.io/etcd Authentication Bypass

Modified: 9/10/2026

Panic due to malformed WALs in go.etcd.io/etcd

Modified: 9/10/2026

etcd: Authorization bypasses in multiple APIs

Modified: 9/10/2026

etcd: Nested etcd transactions bypass RBAC authorization checks

Modified: 9/10/2026

DNS Rebinding in etcd

Modified: 9/10/2026

Etcd Gateway TLS authentication only applies to endpoints detected in DNS SRV records

Modified: 9/10/2026

etcd RBAC bypass allows unauthorized data access via PrevKv/lease attachment in nested transaction Put requests

Modified: 9/10/2026

Panic due to malformed WALs in go.etcd.io/etcd

Modified: 2/4/2026

Authentication bypass in go.etcd.io/etcd

Modified: 2/4/2026

Insecure ciphers are allowed by default in go.etcd.io/etcd

Modified: 2/4/2026

Etcd Gateway TLS endpoint validation only confirms TCP reachability in go.etcd.io/etcd

Modified: 2/4/2026

Etcd embed auto compaction retention negative value causing a compaction loop or a crash in go.etcd.io/etcd

Modified: 2/4/2026

Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only in go.etcd.io/etcd

Modified: 2/4/2026

Authorization bypasses in multiple APIs in go.etcd.io/etcd

Modified: 4/10/2026

Nested etcd transactions bypass RBAC authorization checks in go.etcd.io/etcd

Modified: 4/10/2026