CVE-2026-7827 Details
Description
A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands (for example, against an instance with no password configured) to cause a denial of service and possibly execute arbitrary code by supplying a crafted RDB stream with an attacker-controlled entity property count. The count sizes two variable-length arrays on the thread stack with no upper bound, and the decoder then fills them with attacker-supplied values.
A stack-based buffer overflow vulnerability has been identified in the RDB graph decoders of FalkorDB, prior to version 4.18.4. The issue arises in the '_RdbLoadEntity' function, where a remote attacker can exploit Redis replication commands to cause a denial-of-service condition and possibly execute arbitrary code. This is achieved by sending a crafted RDB stream that includes an attacker-controlled entity property count, which improperly sizes two variable-length arrays on the stack, leading to a buffer overflow. The vulnerability is particularly concerning for instances without a password configured.
Users can upgrade to FalkorDB version 4.18.4 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 9, 2026CISA-ADP
Assessed Oct 9, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/FalkorDB/FalkorDB/commit/7d15431aadf37588fadc2578b90c3afb5e8daa94 | securin | Source CodeVendor |
| https://github.com/FalkorDB/FalkorDB/pull/1973 | securin | Source CodeVendor |
| https://github.com/FalkorDB/FalkorDB/releases/tag/v4.18.4 | securin | Release NotesVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | securin |
Affected Products
| Product | Versions |
|---|---|
| FalkorDB | < 4.18.4 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 9, 2026 | CVE Modified | CISA-ADP |
| Oct 9, 2026 | New CVE Received | securin |