Integer Overflow Vulnerability in FalkorDB Redis Module
CVE-2026-88412

5.3MEDIUM

Key Information:

Vendor

FalkorDB

Status
FalkorDB (Redis module)
Vendor
CVE Published:
21 September 2026

What is CVE-2026-88412?

An integer overflow vulnerability exists in the _BulkInsert_ReadProperty component of FalkorDB, specifically in version v4.20.1. This flaw allows attackers to craft malicious input that can lead to a Denial of Service (DoS), potentially disrupting the availability and functionality of the affected systems. Security measures should be implemented to prevent exploitation through such crafted inputs.

References

https://github.com/FalkorDB/FalkorDB/issues/2326

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.