CVE-2026-73499: Go Etcd Range End Sentinel Rewrite Before Authcve-2026-73499-go-etcd-range-end-sentinel-rewrite-before-auth
Rewriting an open-ended range sentinel slice (`len(...) == 1 && ...[0] == 0`) to an empty slice (`[]byte{}`) prior to authorization checks can cause range permission validation to mistake a range query for a single-key query, bypassing RBAC enforcement.