Write Command Misregistration in FalkorDB by FalkorDB
CVE-2026-88410

7.1HIGH

Key Information:

Vendor

FalkorDB

Status
FalkorDB
Vendor
CVE Published:
21 September 2026

What is CVE-2026-88410?

In FalkorDB versions 4.20.1 to 4.20.4, the graph.UDF function is improperly registered, failing to act as a valid write command. This misregistration can trigger unexpected behaviors in applications that rely on this Redis module, potentially impacting data integrity and application performance. Users of affected versions should prioritize reviewing their implementations and consider updating to secure versions to mitigate risks associated with this behavior.

References

https://github.com/FalkorDB/FalkorDB/issues/2401

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.