CVE-2026-88409

Summary

The flaw in FalkorDB (Redis module) v4.20.1 to v4.20.4 involves a buffer overflow in the _Decode_GrB_Matrix function, allowing attackers to cause a Denial of Service (DoS) via crafted input. This vulnerability is significant because it can lead to service disruption without requiring user interaction.

Exploitability

Exploiting this vulnerability is relatively straightforward as it requires a crafted input, but the attacker must have the ability to send such input to the affected version of FalkorDB.

Blast radius

If exploited, this vulnerability could result in a Denial of Service (DoS) for services relying on the affected version of FalkorDB, potentially impacting availability and user experience.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to FalkorDB v4.20.5 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.