CVE-2026-7827

Summary

A stack-based buffer overflow exists in FalkorDB's RDB graph decoders that allows remote attackers to cause denial of service or execute arbitrary code by crafting malicious RDB streams with controlled entity property counts. This vulnerability arises from insufficient bounds checking on variable-length arrays allocated on the stack.

Exploitability

Exploitation requires a remote attacker who can issue Redis replication commands against an unauthenticated instance, making it moderately difficult but achievable with existing access to the Redis protocol.

Blast radius

If exploited, this vulnerability could impact all FalkorDB instances running versions prior to 4.18.4 that accept replication commands, potentially leading to complete service outages or remote code execution across affected systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to FalkorDB 4.18.4 or later immediately to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.