etcd

v3.6.15Kubernetes Core

Sep 22, 2026

A maintenance release fixes an `etcdctl` output defect and updates the Go toolchain and dependencies. It also includes fixes for CVE-2026-56852 and GHSA-w67g-5rqw-f597, with no stated operator configuration changes.

Action needed (2)

securityhighgolang.org/x/text update for CVE-2026-56852
golang.org/x/text is updated to v0.39.0 to address CVE-2026-56852.
golang.org/x/text to v0.39.0
securitymediumgithub.com/gorilla/websocket update for GHSA-w67g-5rqw-f597
github.com/gorilla/websocket is updated to v1.5.3 to address GHSA-w67g-5rqw-f597.

All 2 other recorded changesfixes 1 · value changes 1

fixes (1)

- [Fix duplicate RaftTerm field in the endpoint status output when using --write-out=fields](https://github.com/etcd-io/etcd/pull/22218)

value changes (1)

- Compile binaries using [go 1.26.8](https://github.com/etcd-io/etcd/pull/22414).

Add etcd to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →

Official release note ↗All etcd releases →