etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a user granted READ permission on a single exact key can use the Watch gRPC API with clientv3.WithFromKey() to receive watch events for every key lexicographically greater than or equal to the permitted key. In server/etcdserver/api/v3rpc/watch.go, the open-ended RangeEnd sentinel is rewritten before the RBAC permission check in server/auth/range_perm_cache.go function isRangeOpPermitted, causing the request to be treated as an exact-key watch. Range/Get and DeleteRange requests are not affected, and the issue affects only clusters with authentication enabled. This issue is fixed in versions 3.5.33, 3.6.14, and 3.7.1.
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-863"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73499.json"
}{
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "3.5.33"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"introduced": "3.6.0"
},
{
"fixed": "3.6.14"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"introduced": "3.7.0-alpha.0"
},
{
"fixed": "3.7.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StringRangeExpression"
},
{
"range": [
{
"fixed": "6643f80602461a6095c9b294b6512fd9719bef41"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "7cf71ec9e2ec54230a5454392fa4ffd4574b41ed"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "afeaa624da19085b47fb5ccc7c22a8c421bc2eae"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "e863b001bbf3367003a543aa3099db9892134cd7"
}
],
"source": "REFERENCES_COMMIT"
},
{
"original_tag": "v3.5.33",
"range": [
{
"fixed": "9f4b125405c7fbd92e2c9cbb5235feffe1904a1d"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "v3.6.14",
"range": [
{
"fixed": "fc04cf702b0a46c2fd85547a2be05705b100a496"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "v3.7.1",
"range": [
{
"fixed": "5e7fd0de9a57db03ecc11794dc40403a734c07bb"
}
],
"source": "REFERENCES_TAG"
}
]
}