CVE-2026-33413 - Vulnerability Analysis

Overview

etcd < 3.4.42, 3.5.28, and 3.6.9 contains an authentication and authorization bypass caused by exposed gRPC API allowing unauthorized users to call sensitive functions, letting attackers disrupt operations and access cluster topology, exploit requires exposed gRPC API to untrusted clients.

Severity & Score

Impact

Unauthorized users can disrupt cluster operations, remove historical data, and learn cluster topology, causing denial of service and operational disruption.

Mitigation

Upgrade to versions 3.4.42, 3.5.28, 3.6.9 or later; restrict network access and require strong client identity such as mTLS.

References

• https://github.com/etcd-io/etcd/security/advisories/GHSA-q8m4-xhhv-38mg

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner