CVE-2026-88411
HighCVSS 7.5Summary
Improper error handling in the GRAPH.EFFECT component in FalkorDB (Redis module) v4.20.1 leads to a Denial of Service (DoS) within the application.
Risk Assessment
An attacker can cause service unavailability, potentially disrupting applications using FalkorDB.
Recommendation
Update FalkorDB to the latest version if available, or apply workarounds recommended by the vendor.
Other vulnerabilities in FalkorDB
See all- CVE-2026-88412Medium
An integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis module) v4.20.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.
- CVE-2026-88410High
The graph.UDF in FalkorDB (Redis module) v4.20.1 to v4.20.4 is not registered as a write command, leading to unexpected behavior within the application.
- CVE-2026-88409High
FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the _Decode_GrB_Matrix function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- CVE-2026-88408Medium
FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the _GetGroup() function (/ops/op_aggregate.c). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
- CVE-2026-88407High
An out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (Redis module) v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service (DoS) via a crafted input.
- CVE-2026-88406High
FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the _ValidateUnion_Clauses function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Original NVD description (English source)
Improper error handling in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB (Redis module) v4.20.1 leads to a Denial of Service (DoS) within the application.