CVE-2021-28235

CriticalCVSS 9.8

Published: 04/04/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.61%

73th percentile - higher than 73% of all known CVEs

An authentication vulnerability in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.

Attackers can gain unauthorized access to sensitive data or take control of the Etcd cluster, leading to confidentiality and integrity breaches.

Upgrade Etcd to version 3.4.11 or later, which includes a fix for this vulnerability. Restrict access to the debug function to trusted users only.

Original NVD description (English source)

Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.