Index Out-of-Range Vulnerability in bbolt Database Library by etcd
CVE-2026-33817

6.2MEDIUM

Key Information:

Vendor

Go.etcd.io/bbolt

Status
Go.etcd.io/bbolt
Vendor
CVE Published:
6 April 2026

What is CVE-2026-33817?

The bbolt database library, utilized by the etcd system, is affected by an index out-of-range issue that occurs when a branch page contains zero elements. This vulnerability can lead to unexpected behavior or application crashes, which could compromise the stability and integrity of applications relying on the bbolt library. Developers are advised to review the changes introduced in the latest updates and apply necessary patches to mitigate any risks associated with this vulnerability.

References

https://github.com/etcd-io/bbolt/pull/1171/changes/386d5b...
https://github.com/golang/vulndb/issues/4923
https://pkg.go.dev/vuln/GO-2026-4923

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Quoc Bui (github.com/quocvibui)
.