CVE-2026-59818

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-59818", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-07-07T15:00:50.978Z", "datePublished": "2026-07-08T21:00:18.207Z", "dateUpdated": "2026-07-09T13:13:10.463Z"}, "containers": {"cna": {"title": "etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation", "problemTypes": [{"descriptions": [{"cweId": "CWE-295", "lang": "en", "description": "CWE-295: Improper Certificate Validation", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/etcd-io/etcd/security/advisories/GHSA-3wh4-j44w-pg92", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/etcd-io/etcd/security/advisories/GHSA-3wh4-j44w-pg92"}, {"name": "https://github.com/etcd-io/etcd/pull/22007", "tags": ["x_refsource_MISC"], "url": "https://github.com/etcd-io/etcd/pull/22007"}, {"name": "https://github.com/etcd-io/etcd/pull/22021", "tags": ["x_refsource_MISC"], "url": "https://github.com/etcd-io/etcd/pull/22021"}, {"name": "https://github.com/etcd-io/etcd/pull/22025", "tags": ["x_refsource_MISC"], "url": "https://github.com/etcd-io/etcd/pull/22025"}, {"name": "https://github.com/etcd-io/etcd/commit/2308ce1578064641d4d67c40f0487309267d1bef", "tags": ["x_refsource_MISC"], "url": "https://github.com/etcd-io/etcd/commit/2308ce1578064641d4d67c40f0487309267d1bef"}, {"name": "https://github.com/etcd-io/etcd/commit/24838af5a53dd0245adced920e42a9bf0e7a267f", "tags": ["x_refsource_MISC"], "url": "https://github.com/etcd-io/etcd/commit/24838af5a53dd0245adced920e42a9bf0e7a267f"}, {"name": "https://github.com/etcd-io/etcd/commit/8221ae82bc25d4d55ca64382207b69be71038cbb", "tags": ["x_refsource_MISC"], "url": "https://github.com/etcd-io/etcd/commit/8221ae82bc25d4d55ca64382207b69be71038cbb"}, {"name": "https://github.com/etcd-io/etcd/releases/tag/v3.5.32", "tags": ["x_refsource_MISC"], "url": "https://github.com/etcd-io/etcd/releases/tag/v3.5.32"}, {"name": "https://github.com/etcd-io/etcd/releases/tag/v3.6.13", "tags": ["x_refsource_MISC"], "url": "https://github.com/etcd-io/etcd/releases/tag/v3.6.13"}], "affected": [{"vendor": "etcd-io", "product": "etcd", "versions": [{"version": ">= 3.6.0-alpha.0, < 3.6.13", "status": "affected"}, {"version": "< 3.5.32", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-08T21:00:18.207Z"}, "descriptions": [{"lang": "en", "value": "etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the gRPC listener, allowing a client with a revoked certificate to authenticate successfully over gRPC. This issue is fixed in versions 3.5.32 and 3.6.13."}], "source": {"advisory": "GHSA-3wh4-j44w-pg92", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-09T13:13:02.654220Z", "id": "CVE-2026-59818", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-09T13:13:10.463Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-59818", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-09T13:13:02.654220Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-09T13:13:06.599Z"}}], "cna": {"title": "etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation", "source": {"advisory": "GHSA-3wh4-j44w-pg92", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "etcd-io", "product": "etcd", "versions": [{"status": "affected", "version": ">= 3.6.0-alpha.0, < 3.6.13"}, {"status": "affected", "version": "< 3.5.32"}]}], "references": [{"url": "https://github.com/etcd-io/etcd/security/advisories/GHSA-3wh4-j44w-pg92", "name": "https://github.com/etcd-io/etcd/security/advisories/GHSA-3wh4-j44w-pg92", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/etcd-io/etcd/pull/22007", "name": "https://github.com/etcd-io/etcd/pull/22007", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/etcd-io/etcd/pull/22021", "name": "https://github.com/etcd-io/etcd/pull/22021", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/etcd-io/etcd/pull/22025", "name": "https://github.com/etcd-io/etcd/pull/22025", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/etcd-io/etcd/commit/2308ce1578064641d4d67c40f0487309267d1bef", "name": "https://github.com/etcd-io/etcd/commit/2308ce1578064641d4d67c40f0487309267d1bef", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/etcd-io/etcd/commit/24838af5a53dd0245adced920e42a9bf0e7a267f", "name": "https://github.com/etcd-io/etcd/commit/24838af5a53dd0245adced920e42a9bf0e7a267f", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/etcd-io/etcd/commit/8221ae82bc25d4d55ca64382207b69be71038cbb", "name": "https://github.com/etcd-io/etcd/commit/8221ae82bc25d4d55ca64382207b69be71038cbb", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/etcd-io/etcd/releases/tag/v3.5.32", "name": "https://github.com/etcd-io/etcd/releases/tag/v3.5.32", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/etcd-io/etcd/releases/tag/v3.6.13", "name": "https://github.com/etcd-io/etcd/releases/tag/v3.6.13", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the gRPC listener, allowing a client with a revoked certificate to authenticate successfully over gRPC. This issue is fixed in versions 3.5.32 and 3.6.13."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-295", "description": "CWE-295: Improper Certificate Validation"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-07-08T21:00:18.207Z"}}}, "cveMetadata": {"cveId": "CVE-2026-59818", "state": "PUBLISHED", "dateUpdated": "2026-07-09T13:13:10.463Z", "dateReserved": "2026-07-07T15:00:50.978Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-07-08T21:00:18.207Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "etcd", "vendor": "etcd-io", "versions": [{"status": "affected", "version": ">= 3.6.0-alpha.0, < 3.6.13"}, {"status": "affected", "version": "< 3.5.32"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:etcd:etcd:*:*:*:*:*:*:*:*", "matchCriteriaId": "5B21E29C-EB51-46BA-AFB6-F1B788A81FC2", "versionEndExcluding": "3.5.32", "vulnerable": true}, {"criteria": "cpe:2.3:a:etcd:etcd:*:*:*:*:*:*:*:*", "matchCriteriaId": "B09A9BF8-8A36-4BC6-8145-D9E06883045E", "versionEndExcluding": "3.6.13", "versionStartIncluding": "3.6.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Certificate Revocation List is not enforced on the gRPC listener, allowing a client with a revoked certificate to authenticate successfully over gRPC. This issue is fixed in versions 3.5.32 and 3.6.13."}, {"lang": "es", "value": "etcd es un almac\u00e9n distribuido de clave-valor para los datos de un sistema distribuido. Antes de las versiones 3.5.32 y 3.6.13, cuando etcd est\u00e1 configurado con --listen-client-http-urls para dividir los puntos finales de cliente HTTP y gRPC en oyentes separados, la Lista de Revocaci\u00f3n de Certificados --client-crl-file no se aplica en el oyente gRPC, permitiendo que un cliente con un certificado revocado se autentique con \u00e9xito a trav\u00e9s de gRPC. Este problema est\u00e1 solucionado en las versiones 3.5.32 y 3.6.13."}], "id": "CVE-2026-59818", "lastModified": "2026-10-25T17:10:00.197", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.2, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-59818", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-07-09T13:13:02.654220Z", "version": "2.0.3"}}]}, "published": "2026-07-08T21:16:54.503", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/etcd-io/etcd/commit/2308ce1578064641d4d67c40f0487309267d1bef"}, {"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/etcd-io/etcd/commit/24838af5a53dd0245adced920e42a9bf0e7a267f"}, {"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/etcd-io/etcd/commit/8221ae82bc25d4d55ca64382207b69be71038cbb"}, {"source": "security-advisories@github.com", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/etcd-io/etcd/pull/22007"}, {"source": "security-advisories@github.com", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/etcd-io/etcd/pull/22021"}, {"source": "security-advisories@github.com", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/etcd-io/etcd/pull/22025"}, {"source": "security-advisories@github.com", "tags": ["Product", "Release Notes"], "url": "https://github.com/etcd-io/etcd/releases/tag/v3.5.32"}, {"source": "security-advisories@github.com", "tags": ["Product", "Release Notes"], "url": "https://github.com/etcd-io/etcd/releases/tag/v3.6.13"}, {"source": "security-advisories@github.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://github.com/etcd-io/etcd/security/advisories/GHSA-3wh4-j44w-pg92"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "etcd: etcd: Authentication bypass due to improper Certificate Revocation List enforcement on gRPC listener", "id": "2498305", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498305"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-295", "details": ["A flaw was found in etcd, a distributed key-value store. When etcd is configured to use separate listeners for HTTP and gRPC client endpoints, the Certificate Revocation List (CRL) is not properly enforced on the gRPC listener. This oversight allows a client with a revoked certificate to successfully authenticate, potentially leading to unauthorized access and compromise of data integrity."], "name": "CVE-2026-59818", "package_state": [{"cpe": "cpe:/a:redhat:openstack:16.2", "fix_state": "Fix deferred", "package_name": "etcd", "product_name": "Red Hat OpenStack Platform 16.2"}, {"cpe": "cpe:/a:redhat:openstack:17.1", "fix_state": "Fix deferred", "package_name": "etcd", "product_name": "Red Hat OpenStack Platform 17.1"}], "public_date": "2026-07-08T21:00:18Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-59818\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-59818\nhttps://github.com/etcd-io/etcd/commit/2308ce1578064641d4d67c40f0487309267d1bef\nhttps://github.com/etcd-io/etcd/commit/24838af5a53dd0245adced920e42a9bf0e7a267f\nhttps://github.com/etcd-io/etcd/commit/8221ae82bc25d4d55ca64382207b69be71038cbb\nhttps://github.com/etcd-io/etcd/pull/22007\nhttps://github.com/etcd-io/etcd/pull/22021\nhttps://github.com/etcd-io/etcd/pull/22025\nhttps://github.com/etcd-io/etcd/releases/tag/v3.5.32\nhttps://github.com/etcd-io/etcd/releases/tag/v3.6.13\nhttps://github.com/etcd-io/etcd/security/advisories/GHSA-3wh4-j44w-pg92"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[3.6.0-alpha.0,3.6.13)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,3.5.32)"}}], "enrichment": {"confidence": 86.0, "confidence_source": "matching", "scores": [{"score": 86.0, "source": "matching"}]}, "original": {"product": "etcd", "source": "cna", "vendor": "etcd-io"}, "product": "etcd", "vendor": "etcd"}], "created": "2026-07-09T04:00:11.598264+00:00", "updated": "2026-08-01T15:30:03.758407+00:00", "vendors": ["etcd", "etcd$PRODUCT$etcd"]}