CVE-2026-88412

5.3 MEDIUMpublic exploit available

Published 2026-09-21 · Updated 2026-09-21

AI risk analysis

Summary: The flaw involves an integer overflow in FalkorDB's Redis module v4.20.1, allowing attackers to cause a Denial of Service via crafted input, which could disrupt service availability.
Exploitability: Exploitation requires crafting specific input, making it moderately difficult but feasible for advanced attackers.
Blast radius: If exploited, this flaw could significantly impact service availability, potentially leading to downtime or performance degradation in affected systems.
Prioritized remediation: Update FalkorDB Redis module to a patched version immediately to mitigate the risk of DoS attacks.

dosredisdb

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

An integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) of FalkorDB (Redis module) v4.20.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Public exploit & PoC references

https://github.com/FalkorDB/FalkorDB/issues/2326

All references

https://github.com/FalkorDB/FalkorDB/issues/2326

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.