Denial of Service Vulnerability in DragonflyDB by Dragonfly

CVE-2025-26268

What is CVE-2025-26268?

Authenticated users of DragonflyDB prior to version 1.27.0 can exploit a vulnerability resulting from inadequate validation of scan cursor inputs. By sending specially crafted Redis commands, these users can trigger a crash of the daemon, leading to a denial of service. This behavior highlights the necessity for robust input validation and security practices within the system to prevent service disruptions.

References