CVE-2026-88411

7.5 HIGHpublic exploit available

Published 2026-09-21 · Updated 2026-09-22

AI risk analysis

Summary: The flaw involves improper error handling in FalkorDB v4.20.1's GRAPH.EFFECT component, leading to a Denial of Service (DoS). This matters because attackers can exploit it to disrupt service without needing specific privileges.
Exploitability: Exploitation is relatively easy with public exploits available; requires access to the affected Redis module version.
Blast radius: If exploited, this could significantly impact availability, causing widespread service disruptions for users of FalkorDB v4.20.1.
Prioritized remediation: Update to a patched version of FalkorDB or apply vendor-provided patches immediately.

dosredisdb

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Improper error handling in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB (Redis module) v4.20.1 leads to a Denial of Service (DoS) within the application.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-248

Public exploit & PoC references

References

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.