Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-44283

Fixed in a distro release EPSS <1%

etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and 3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease attachment in Put requests within transaction operations, to bypass RBAC authorization checks. An authenticated user without sufficient read or lease-related permissions may be able to access unauthorized data or attach leases by invoking transaction operations with these features enabled. This vulnerability is fixed in 3.4.44, 3.5.30, and 3.6.11.

Published 2026-05-14 · CVE record · OSV

Products: etcd-io etcd

Fixed upstream

EcosystemPackageFixed in
Gogo.etcd.io/etcd3.4.44
Gogo.etcd.io/etcd/server/v33.5.30
Gogo.etcd.io/etcd/server/v33.6.11
Gogo.etcd.io/etcd/v33.6.11
Gogo.etcd.io/etcd/v33.5.30

Distro releases

ReleasePackageFixed in
Chainguarddapr-scheduler-1.141.14.5-r32
Chainguarddapr-scheduler-1.151.15.14-r13
Chainguarddapr-scheduler-1.161.16.17-r2
Chainguarddapr-scheduler-1.171.17.11-r2
Chainguarddapr-scheduler-1.181.18.2-r3
Chainguarddapr-scheduler-fips-1.141.14.5-r29
Chainguarddapr-scheduler-fips-1.151.15.14-r14
Chainguarddapr-scheduler-fips-1.161.16.17-r5
Chainguarddapr-scheduler-fips-1.171.17.11-r4
Chainguarddapr-scheduler-fips-1.181.18.2-r3
Chainguarddockerd-280
Chainguarddockerd-290
Chainguarddockerd-fips-280
Chainguarddockerd-fips-290
Chainguardetcd-3.43.4.45-r0
Chainguardjuicefs-1.2no fix
Chainguardjuicefs-1.31.3.1-r22
Chainguardkcp-0.290.29.3-r5
Chainguardkcp-0.29-cache-server0.29.3-r5
Chainguardkcp-0.300.30.3-r5
Chainguardkcp-0.30-cache-server0.30.3-r5
Chainguardkcp-0.310.31.4-r5
Chainguardkcp-0.31-cache-server0.31.4-r5
Chainguardkcp-0.320.32.3-r5
Chainguardkcp-0.32-cache-server0.32.3-r5
Chainguardkcp-fips-0.290.29.3-r5
Chainguardkcp-fips-0.29-cache-server0.29.3-r5
Chainguardkcp-fips-0.300.30.3-r5
Chainguardkcp-fips-0.30-cache-server0.30.3-r5
Chainguardkcp-fips-0.310.31.6-r5
Chainguardkcp-fips-0.31-cache-server0.31.6-r5
Chainguardkcp-fips-0.320.32.3-r7
Chainguardkcp-fips-0.32-cache-server0.32.3-r7
Chainguardmilvus-2.52.5.27-r21
Chainguardmilvus-2.62.6.22-r1
Chainguardmulticluster-controlplane0.8.0-r7
Chainguardmulticluster-controlplane-fips0.8.0-r6
Chainguardpy3-etcd0
Chainguardpy3.10-etcd0
Chainguardpy3.11-etcd0
Chainguardpy3.12-etcd0
Chainguardpy3.13-etcd0
Chainguardrancher-support-bundle-kit0.0.91-r1
Chainguardrke2-cloud-provider-fips0
Chainguardvcluster0
Chainguardvcluster-cli0
Chainguardvcluster-cli-fips0
Chainguardvcluster-fips0
Chainguardvcluster-syncer0
Chainguardvcluster-syncer-fips0
Debian 12etcdno fix
Debian 13etcdno fix
Debian 14etcd3.5.16-11
Red Hat hummingbird 1etcd0:3.7.1-0.1.hum1
SUSE Linux Enterprise Server 16.0govulncheck-vulndb0.0.20260727T201416-160000.1.1
SUSE Linux Enterprise Server for SAP applications 16.0govulncheck-vulndb0.0.20260727T201416-160000.1.1
Ubuntu 16.04 LTSetcdno fix
Ubuntu 25.10etcdno fix
Ubuntu 26.10etcdno fix
Ubuntu Pro 18.04 LTSetcdno fix
Ubuntu Pro 20.04 LTSetcdno fix
Ubuntu Pro 22.04 LTSetcdno fix
Ubuntu Pro 24.04 LTSetcdno fix
Ubuntu Pro 26.04 LTSetcdno fix
Wolfidapr-scheduler-1.161.16.17-r2
Wolfidapr-scheduler-1.171.17.11-r2
Wolfidockerd-280
Wolfidockerd-290
Wolfijuicefs-1.31.3.1-r22
Wolfipy3-etcd0
Wolfipy3.10-etcd0
Wolfipy3.11-etcd0
Wolfipy3.12-etcd0
Wolfipy3.13-etcd0
Wolfivcluster0
Wolfivcluster-cli0
Wolfivcluster-syncer0
openSUSE Leap 16.0govulncheck-vulndb0.0.20260727T201416-160000.1.1
openSUSE Tumbleweedflannel0.28.5-1.1