CVE-2026-86227

Name of the Vulnerable Software and Affected Versions valkey-io valkey versions prior to 9.0.6 valkey-io valkey versions prior to 9.1.2

Description A weakness exists in the kvstoreGetHashtable() function within the src/kvstore.c file. Manipulation of the didx variable can lead to an out-of-bounds read, which occurs when the software reads data outside the intended boundary of a buffer. This issue can be triggered remotely but requires high complexity, specifically requiring cluster mode and an attacker-controlled dump.rdb file at startup, which could be achieved via data-dir write access, a replication feed, or a stored crafted RDB. This can result in a Denial of Service (DoS) at boot.

Recommendations Deploy patch 4691888e7fab3df128f0bde5750c9fde2ae552fa for versions prior to 9.0.6. Deploy patch 4691888e7fab3df128f0bde5750c9fde2ae552fa for versions prior to 9.1.2.