Rust Based Valkey Module Vulnerability in Valkey Distributed Key-Value Database

CVE-2026-21864

What is CVE-2026-21864?

The Valkey Bloom module, a Rust-based component of the Valkey distributed key-value database, contains a vulnerability that can lead to a server shutdown when a specially crafted RESTORE command is executed. This issue arises due to the module failing to set the error handling flag VALKEYMODULE_OPTIONS_HANDLE_IO_ERRORS during RDB parsing. As a result, encountering parsing errors triggers an assertion failure, causing the server to crash. To address this vulnerability, users can either update to the patched version or disable the RESTORE command if it is not being utilized in their applications. For further details, refer to the official advisory and commit documentation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References