CVE-2026-88407

HIGH CVSS 7.5 View on NVD ↗

Description

An out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (Redis module) v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service (DoS) via a crafted input.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://github.com/FalkorDB/FalkorDB/issues/2328

Published: Sep 21, 2026 21:17 UTC Modified: Sep 21, 2026 21:17 UTC