CVE-2026-88406: High severity FalkorDB FalkorDB vulnerability
FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function (/ast/astvalidations.c). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
FalkorDB versions 4.20.1 through 4.20.4 are identified as affected. The issue is in the FalkorDB Redis module's AST validation code.
What does an attacker need to exploit this issue?
An attacker needs network access to send crafted input to the affected FalkorDB service. The supplied severity vector indicates no privileges or user interaction are required.
What is the expected impact?
Successful exploitation can cause a denial of service through a stack overflow in _ValidateUnion_Clauses. The provided data identifies availability impact and does not identify confidentiality or integrity impact.