1. Home
  2. CVE Database
  3. CVE-2026-44283
NONE · 0.0

CVE-2026-44283

etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and 3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease attachment in Put reque...

Vulnerability Description

etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and 3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease attachment in Put requests within transaction operations, to bypass RBAC authorization checks. An authenticated user without sufficient read or lease-related permissions may be able to access unauthorized data or attach leases by invoking transaction operations with these features enabled. This vulnerability is fixed in 3.4.44, 3.5.30, and 3.6.11.

CVSS Score

0.0

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
EtcdEtcd< 3.4.44

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2026-44283?

CVE-2026-44283 is a vulnerability with a CVSS score of 0.0 (NONE). etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and 3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease attachment in Put reque...

How severe is CVE-2026-44283?

CVE-2026-44283 has been rated NONE with a CVSS base score of 0.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-44283?

Check the references section above for vendor advisories and patch information. Affected products include: Etcd Etcd.