CVE-2026-82631
published 2026-08-31CVE-2026-82631: A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the…
PriorityP414low2.2CVSS 3.1
AVNACHPRHUINSUCNINAL
EPSS
0.55%
45.5th percentile
A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free. The attack may be performed from remote. A high complexity level is associated with this attack. The exploitability is described as difficult. The exploit has been released to the public and may be used for attacks. The patch is identified as b2fb0e13f5b4c8c2fb63dcfc2c37a067a0d6d20b. Applying a patch is advised to resolve this issue.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| valkey-io | valkey | — | — |
CVSS provenance
nvdv3.12.2LOWCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
nvdv4.01.2LOWCVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.01.7LOWAV:N/AC:H/Au:M/C:N/I:N/A:P
vendor_redhat2.2LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A security flaw has been discovered in valkey-io valkey 9.1.0.
ghsa_unreviewed·2026-08-31
CVE-2026-82631 [LOW] CWE-119 A security flaw has been discovered in valkey-io valkey 9.1.0.
A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free. The attack may be performed from remote. A high complexity level is associated with this attack. The exploitability is described as difficult. The exploit has been released to the public and may be used for attacks. The patch is identified as b2fb0e13f5b4c8c2fb63dcfc2c37a067a0d6d20b. Applying a patch is advised to resolve this issue.
VulDB
valkey-io valkey 9.1.0 Blocked-on-keys Subsystem src/blocked.c handleClientsBlockedOnKey use after free (Issue 4198)
vuldb·2026-08-30
CVE-2026-82631 [LOW] valkey-io valkey 9.1.0 Blocked-on-keys Subsystem src/blocked.c handleClientsBlockedOnKey use after free (Issue 4198)
A vulnerability was found in valkey-io valkey 9.1.0 and classified as problematic. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free.
This vulnerability was named CVE-2026-82631. The attack may be performed from remote. In addition, an exploit is available.
Applying a patch is advised to resolve this issue.
Red Hat
valkey: Valkey: Use-after-free vulnerability in Blocked-on-keys subsystem
vendor_redhat·2026-08-31·CVSS 2.2
CVE-2026-82631 [LOW] CWE-825 valkey: Valkey: Use-after-free vulnerability in Blocked-on-keys subsystem
valkey: Valkey: Use-after-free vulnerability in Blocked-on-keys subsystem
A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free. The attack may be performed from remote. A high complexity level is associated with this attack. The exploitability is described as difficult. The exploit has been released to the public and may be used for attacks. The patch is identified as b2fb0e13f5b4c8c2fb63dcfc2c37a067a0d6d20b. Applying a patch is advised to resolve this issue.
A flaw was found in Valkey. A use-after-free vulnerability exists within the `handleClientsBlockedOnKey` function of the Blocked-on-keys Subsystem.
No detection rules found.
No public exploits indexed.
https://github.com/user-attachments/files/30111628/PoC.ziphttps://github.com/valkey-io/valkey/https://github.com/valkey-io/valkey/commit/b2fb0e13f5b4c8c2fb63dcfc2c37a067a0d6d20bhttps://github.com/valkey-io/valkey/issues/4198https://github.com/valkey-io/valkey/pull/4212https://vuldb.com/cve/CVE-2026-82631https://vuldb.com/submit/893793https://vuldb.com/vuln/397129https://vuldb.com/vuln/397129/cti
2026-08-31
Published