CVE-2026-59818

Name
CVE-2026-59818
Description
etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the gRPC listener, allowing a client with a revoked certificate to authenticate successfully over gRPC. This issue is fixed in versions 3.5.32 and 3.6.13.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
security-advisories@github.com https://github.com/etcd-io/etcd/commit/2308ce1578064641d4d67c40f0487309267d1bef
security-advisories@github.com https://github.com/etcd-io/etcd/commit/24838af5a53dd0245adced920e42a9bf0e7a267f
security-advisories@github.com https://github.com/etcd-io/etcd/commit/8221ae82bc25d4d55ca64382207b69be71038cbb
security-advisories@github.com https://github.com/etcd-io/etcd/pull/22007
security-advisories@github.com https://github.com/etcd-io/etcd/pull/22021
security-advisories@github.com https://github.com/etcd-io/etcd/pull/22025
security-advisories@github.com https://github.com/etcd-io/etcd/releases/tag/v3.5.32
security-advisories@github.com https://github.com/etcd-io/etcd/releases/tag/v3.6.13
security-advisories@github.com https://github.com/etcd-io/etcd/security/advisories/GHSA-3wh4-j44w-pg92

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:etcd:etcd:*:*:*:*:*:*:*:* etcd >= None < 3.5.32
cpe:2.3:a:etcd:etcd:*:*:*:*:*:*:*:* etcd >= 3.6.0 < 3.6.13

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
etcd edge-community 3.6.13-r0 Francesco Colista <fcolista@alpinelinux.org> fixed
etcd edge-community 3.6.11-r1 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.6.11-r0 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.6.10-r1 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.6.10-r0 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.6.8-r1 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.6.8-r0 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.6.4-r6 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.6.4-r4 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.6.4-r3 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.6.4-r2 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.6.4-r1 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.6.4-r0 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.5.18-r5 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.5.18-r4 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.5.18-r3 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.5.18-r2 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.5.18-r1 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.5.18-r0 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.5.16-r3 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.5.16-r2 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd edge-community 3.5.16-r1 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable
etcd 3.24-community 3.6.11-r1 Francesco Colista <fcolista@alpinelinux.org> possibly vulnerable