etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and 3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease attachment in Put requests within transaction operations, to bypass RBAC authorization checks. An authenticated user without sufficient read or lease-related permissions may be able to access unauthorized data or attach leases by invoking transaction operations with these features enabled. This vulnerability is fixed in 3.4.44, 3.5.30, and 3.6.11.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and
    3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease attachment in Put requests within
    transaction operations, to bypass RBAC authorization checks. An authenticated user without sufficient read
    or lease-related permissions may be able to access unauthorized data or attach leases by invoking
    transaction operations with these features enabled. This vulnerability is fixed in 3.4.44, 3.5.30, and
    3.6.11. (CVE-2026-44283)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and     3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease attachment in Put requests within     transaction operations, to bypass RBAC authorization checks. An authenticated user without sufficient read     or lease-related permissions may be able to access unauthorized data or attach leases by invoking     transaction operations with these features enabled. This vulnerability is fixed in 3.4.44, 3.5.30, and     3.6.11. (CVE-2026-44283)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
463928	Echo: go.etcd.io/etcd/server/v3: security update to 3.4.44	Tenable Cloud Security	Echo Local Security Checks	Local	medium
463928	Echo: go.etcd.io/etcd/server/v3: security update to 3.4.44	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
314841	Linux Distros Unpatched Vulnerability : CVE-2026-44283	Nessus	Misc.	Local	medium
441443	SCA: security update for go.etcd.io/etcd, go.etcd.io/etcd/v3 (GHSA-x35m-3gp4-4fh5)	Tenable Cloud Security	SCA Checks	Local	medium
441443	SCA: security update for go.etcd.io/etcd, go.etcd.io/etcd/v3 (GHSA-x35m-3gp4-4fh5)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-44283

medium

Tenable Plugins

medium

medium

medium

medium

medium