CVE-2026-72568: Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler
An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port. The getPingExtLength() function in the cluster bus message parser does not validate extension length fields against the actual remaining buffer size, allowing an attacker-controlled packet to cause the parser to read beyond the allocated buffer boundary.
Other sources
Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler
— Microsoft
Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72568?
CVE-2026-72568 has a severity rating of high, with a CVSS score of 7.1.
How do I fix CVE-2026-72568?
To fix CVE-2026-72568, upgrade to the latest version of Redis that addresses this vulnerability.
What type of vulnerability is CVE-2026-72568?
CVE-2026-72568 is a heap out-of-bounds read vulnerability in Redis.
Who can exploit CVE-2026-72568?
An adjacent unauthenticated attacker can exploit CVE-2026-72568 by sending a specially crafted PING message.
What are the potential impacts of CVE-2026-72568?
CVE-2026-72568 can lead to denial of service or information disclosure.