Redis TLS pending-data list use-after-free
view advisory published 2026-08-27
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-81934US | — | — | ||
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote,… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- FixedRedis
Fixed in 6.2.24.
https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834 - FixedRedis Software (Enterprise)
Fixed in 7.22.2-179.
https://redis.io/docs/latest/operate/rs/release-notes/rs-7-22-releases/rs-7-22-2-179/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan