etcd Security Advisory: Multiple Vulnerabilities

CERT-Bund has released a security advisory (WID-SEC-2026-0818) detailing multiple vulnerabilities in the open-source distributed key-value store, etcd. The advisory highlights that versions prior to 3.6.9, 3.5.28, and 3.4.42 are affected. These vulnerabilities, rated with a high CVSS base score of 8.6, allow remote attackers to bypass security mechanisms. The advisory applies to Linux, UNIX, and Windows operating systems.

Organizations utilizing vulnerable versions of etcd must take immediate action to mitigate risks. This includes upgrading etcd to a patched version (3.6.9, 3.5.28, 3.4.42, or later) or implementing relevant security controls. Failure to address these vulnerabilities could lead to unauthorized access and compromise of critical system data. The advisory provides links for further information and specific CVE details.