CVE-2026-44283
MediumAdvisory
Published 7 May 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.3
- base score, highest
- EPSS
- 0.002
- 13th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 126
- of 17,781 indexed, latest versions
- Container images
- 107
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks
Carried by container images the latest versions of 126 of 17,781 indexed charts deploy, on 107 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| etcdbitnami | 3.5.7-0, 3.6.1-1, 3.6.4-0 | 3.4.44 | 4 |
| go.etcd.io/ | v3.5.5, v3.5.6, v3.5.7, v3.5.9+8 more | 3.5.30 | 24 |
| go.etcd.io/ | v0.0.0-20190215181705-784daa04988c, v0.0.0-20190228193606-a943ad0ee4c9, v0.0.0-20191023171146-3cf2f69b5738, v0.0.0-20200401174654-e694b7bb0875+14 more | 3.4.44 | 79 |
Charts affected
126 by stars
Container images carrying it
107 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | 5fd12edcc694 | go.etcd.io/ | 3.4.44 | 1 |
| hashicorp/ | dfc3500beb0e | go.etcd.io/ | 3.4.44 | 1 |
| hbahadorzadeh/ | bf9756b3bc47 | go.etcd.io/ | 3.4.44 | 1 |
| hyperledger/ | 37294e05209b | go.etcd.io/ | 3.4.44 | 1 |
| instill/ | c4a393e601ed | go.etcd.io/ | 3.5.30 | 1 |
| iomesh/ | 60081c9b2f52 | go.etcd.io/ | 3.4.44 | 1 |
| iomesh/ | ba4dd6be7e59 | go.etcd.io/ | 3.4.44 | 1 |
| juicedata/ | 43978fc60798 | go.etcd.io/ | 3.4.44 | 1 |
| juicedata/ | 95008ba63318 | go.etcd.io/ | 3.4.44 | 1 |
| kiosksh/ | 501725ba2025 | go.etcd.io/ | 3.4.44 | 1 |
| kubedb/ | 5829bcedcb0d | go.etcd.io/ | 3.4.44 | 1 |
| kubedb/ | 7d27865514ee | go.etcd.io/ | 3.4.44 | 1 |
| kubedb/ | 1a06ff0bda52 | go.etcd.io/ | 3.4.44 | 1 |
| library/ | 2a232a42256f | go.etcd.io/ | 3.5.30 | 1 |
| library/ | aa3df78ecf32 | go.etcd.io/ | 3.5.30 | 1 |
| library/ | dd43b430341a | go.etcd.io/ | 3.5.30 | 1 |
| library/ | eda951fd29a8 | go.etcd.io/ | 3.4.44 | 1 |
| library/ | f5af5a5ce17f | go.etcd.io/ | 3.4.44 | 1 |
| loftsh/ | 310cc7d690f5 | go.etcd.io/ | 3.4.44 | 1 |
| loftsh/ | 023b13bf5898 | go.etcd.io/ | 3.4.44 | 1 |
| megaease/ | fad1c7452958 | go.etcd.io/ | 3.5.30 | 1 |
| mesosphere/ | 63bc411b930b | go.etcd.io/ | 3.4.44 | 1 |
| mesosphere/ | b036785a8862 | go.etcd.io/ | 3.4.44 | 1 |
| mesosphere/ | 94af41b6dd9a | go.etcd.io/ | 3.4.44 | 1 |
| mesosphere/ | 4fd8889195fe | go.etcd.io/ | 3.4.44 | 1 |
| milvusdb/ | 102aac62827b | etcd | 3.4.44 | 1 |
| milvusdb/ | fededb2f2d63 | etcd | 3.4.44 | 1 |
| milvusdb/ | a3a55e1c1497 | go.etcd.io/ | 3.5.30 | 1 |
| minio/ | 2a374c124d44 | go.etcd.io/ | 3.4.44 | 1 |
| otel/ | dfb3a55ea8c9 | go.etcd.io/ | 3.4.44 | 1 |
| sorintlab/ | 36b45c0f97fc | go.etcd.io/ | 3.4.44 | 1 |
| thanosio/ | b12d5c31bf5a | go.etcd.io/ | 3.4.44 | 1 |
| thesisrobot/ | 287129953689 | go.etcd.io/ | 3.5.30 | 1 |
| thmmniii/ | 86105349c1a3 | go.etcd.io/ | 3.5.30 | 1 |
| traefik/ | acc7fcca5f1c | go.etcd.io/ | 3.5.30 | 1 |
| vineyardcloudnative/ | 9d419aa18faa | go.etcd.io/ | 3.4.44 | 1 |
| vultr/ | 541c3e0aec58 | go.etcd.io/ | 3.4.44 | 1 |
| vultr/ | 1806f17d620c | go.etcd.io/ | 3.4.44 | 1 |
| ghcr.io/ | 269d0e55ea97 | go.etcd.io/ | 3.5.30 | 1 |
| ghcr.io/ | 6c62e01e736b | go.etcd.io/ | 3.5.30 | 1 |
| ghcr.io/ | c298183a5208 | go.etcd.io/ | 3.4.44 | 1 |
| ghcr.io/ | 6de40f528be9 | go.etcd.io/ | 3.5.30 | 1 |
| ghcr.io/ | 5dfa86b6451f | go.etcd.io/ | 3.5.30 | 1 |
| ghcr.io/ | 90097a08b87c | go.etcd.io/ | 3.5.30 | 1 |
| ghcr.io/ | 45e744fc623f | go.etcd.io/ | 3.5.30 | 1 |
| ghcr.io/ | ded797477896 | go.etcd.io/ | 3.4.44 | 1 |
| public.ecr.aws/ | 783d550ad813 | go.etcd.io/ | 3.4.44 | 1 |
| quay.io/ | d6fd2a9e3273 | go.etcd.io/ | 3.4.44 | 1 |
| quay.io/ | 5d1c2cf4c538 | go.etcd.io/ | 3.4.44 | 1 |
| quay.io/ | b741efae8d31 | go.etcd.io/ | 3.5.30 | 1 |