k3s v1.37.0+k3s1 released on 14-09-2026
k3s v1.37.0+k3s1 is out now. It upgrades the embedded Kubernetes to v1.37.0 and includes dependency security updates, most notably bumping google.golang.org/grpc to v1.83.2 to address CVE-2026-84445.
See the k3s GitHub release notes and the upstream Kubernetes 1.37 changelog for full details and any platform-specific guidance.
What’s in this release
- Kubernetes upgrade to v1.37.0 with matching embedded component bumps: Kine v0.17.0, Etcd v3.7.1-k3s1, Containerd v2.3.4-k3s1.36, Runc v1.4.2, Flannel v0.28.4, Metrics-server v0.9.0, Traefik v3.7.13, CoreDNS v1.14.7 and Local Path Provisioner v0.0.37.
- Dependency security update: google.golang.org/grpc bumped to v1.83.2 to mitigate CVE-2026-84445.
- Reliability, operational and tooling fixes including atomic write improvements (dynamiclistener and WriteSubnetFile), advertise-address added to apiserver cert SANs, etcd client locking, airgap image retag fix, a –write-kubeconfig-name flag for custom kubeconfig names, and CI/test robustness improvements.
Upgrade notes
- No breaking API changes are listed in these notes; review the upstream Kubernetes 1.37 changelog and the k3s documentation before upgrading to confirm compatibility with your workloads and add-ons.
- If you need to roll back, reinstall the prior stable release (for example v1.36.3+k3s1) or follow the k3s project’s upgrade/rollback guidance and open an issue on the k3s GitHub if you encounter problems.
Share your upgrade experience or any issues via the k3s GitHub issues page or on the project’s Slack channel — community feedback is appreciated.
