CVE-2026-23631

EUVD-2026-27398
Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remote code execution. A workaround is to prevent users from executing Lua scripts or avoid using replicas where replica-read-only is disabled. This is patched in version 8.6.3.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.1 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 85.11%
Affected Products (NVD)
VendorProductVersion
redisredis
𝑥
< 8.6.3
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Enterprise Linux 10
0:8.0.9-1.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
0:8.0.9-1.el10_0 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
9080020260521083756.9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:8.0.9-1.el9_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
9040020260625094332.9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
9060020260602115714.9 ≤
𝑥
< *
ADP
Red HatRed Hat Hardened Images
9.0.4-0.1.hum1 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
redis
bookworm
vulnerable
bookworm (security)
5:7.0.15-1~deb12u8
fixed
bullseye
ignored
bullseye (security)
vulnerable
forky
vulnerable
sid
vulnerable
trixie
vulnerable
trixie (security)
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
redis
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
questing
ignored
resolute
needs-triage
trusty
needs-triage
xenial
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
redis
suse enterprise server 15 SP6
7.2.4-150600.3.24.1
fixed
redis7
suse enterprise server 15 SP5
7.0.8-150500.3.31.1
fixed
suse enterprise server 15 SP6
7.0.8-150600.8.25.1
fixed
valkey
suse enterprise sap 15 SP7
8.0.9-150700.3.17.1
fixed
suse enterprise server 15 SP6
8.0.9-150600.13.23.1
fixed
suse enterprise server 15 SP7
8.0.9-150700.3.17.1
fixed
valkey-compat-redis
suse enterprise sap 15 SP7
8.0.9-150700.3.17.1
fixed
suse enterprise server 15 SP6
8.0.9-150600.13.23.1
fixed
suse enterprise server 15 SP7
8.0.9-150700.3.17.1
fixed
valkey-devel
suse enterprise sap 15 SP7
8.0.9-150700.3.17.1
fixed
suse enterprise server 15 SP6
8.0.9-150600.13.23.1
fixed
suse enterprise server 15 SP7
8.0.9-150700.3.17.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
valkey
RHEL 9
0:8.0.9-1.el9_8
fixed
valkey-devel
RHEL 9
0:8.0.9-1.el9_8
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
valkey
Amazon Linux 2023
0:9.0.4-1.amzn2023.0.1
fixed
valkey-debuginfo
Amazon Linux 2023
0:9.0.4-1.amzn2023.0.1
fixed
valkey-debugsource
Amazon Linux 2023
0:9.0.4-1.amzn2023.0.1
fixed
valkey-devel
Amazon Linux 2023
0:9.0.4-1.amzn2023.0.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
valkey
Azure Linux 3.0
0:8.0.9-1.azl3
fixed