Etcd-io vulnerabilities
We track 4 vulnerabilities in Etcd-io products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 12, 2026.
Latest Etcd-io vulnerabilities
- 8.7 High severity
etcd: Allocation of Resources Without Limits or Throttling
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/l
- 7.1 High severity
etcd: Incorrect Authorization
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a user granted READ permission on a single exact key can use the Watch gRPC API with clientv3.WithFromKey() to receive watch events for eve
- 8.1 High severity
etcd: Improper Certificate Validation
etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Re
- 8.8 High severity
etcd: Missing Authorization
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API t