Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

coreos/etcd

              main @ 774da65
            

Fixes

CVEs

CRITICAL

Peak severity

61.5%

Coverage

Highlights

Auth Bypass: 52 prior fixes. Scrutinize any change in this area.

auth/store.go: most-fixed (11 issues). Treat as high-risk during review.

72 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple critical/high fixes show permission checks missing on transactional operations, DeleteRange, lease revoke, and auth-related admin ops. The apply path is a central chokepoint where bypasses have repeatedly occurred.

Auth Bypass: Range permission cache has had numerous logic errors: invalid ranges, stale cache, incorrect subset/merge, byte vs string comparison, and concurrency issues. These can grant unauthorized key access.

Auth Bypass: Several v3 RPC endpoints (Compact, Alarm, MemberList, Lease*, Maintenance Status/MoveLeader/Downgrade, Watch) lacked auth checks. Watch also had RangeEnd rewrite before permission check.