CVE-2026-81934

Redis TLS pending-data list use-after-free

State: Published
Severity: 7.5 High
Published: Aug 27, 2026
Updated: Aug 31, 2026
Reserved: Aug 27, 2026

Description

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.

Scores

CVSS	Score	Vector	Source
4.0	7.5 High	CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	cisa-cg
3.1	7.1 High	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	cisa-cg

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
RedisRedis	8.2.9Not affected 8.4.6Not affected 8.6.6Not affected 8.8.2Not affected 8.10.1Not affected 7.4.11Not affected 6.2.24Not affected 7.2.16Not affected before 8.8.2Affected before 8.2.9Affected before 8.4.6Affected before 8.6.6Affected before 8.10.1Affected before 7.4.11Affected before 6.2.24Affected before 7.2.16Affected
Redis Software (Enterprise)Redis	8.2.0-46Not affected 8.0.20-96Not affected 7.22.2-179Not affected 7.8.6-303Not affected before 8.2.0-46Affected before 8.0.20-96Affected before 7.22.2-179Affected before 7.8.6-303Affected

References

urlpatch
urlexploit
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlthird-party-advisory
urlvdb-entry
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes
urlrelease-notes

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.