CVE-2026-85522
published 2026-09-04CVE-2026-85522: A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file…
PriorityP434medium5.3CVSS 3.1
AVNACLPRNUINSUCNINAL
EPSS
0.86%
58.1th percentile
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/cluster_migrateslots.c of the component Slot Migration. The manipulation of the argument job_name results in out-of-bounds read. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 9.0.5 and 9.1.1 addresses this issue. The patch is identified as f4dc3ca09eb650c2fe14060090a41c524eca803f. Upgrading the affected component is advised.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ubuntu | valkey | — | — |
| valkey-io | valkey | — | — |
| valkey-io | valkey | — | — |
| valkey-io | valkey | — | — |
| valkey-io | valkey | — | — |
| valkey-io | valkey | — | — |
| valkey-io | valkey | — | — |
| valkey-io | valkey | — | — |
| valkey-io | valkey | — | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
nvdv4.05.5MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_ubuntu7.5HIGH
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Valkey vulnerabilities
vendor_ubuntu·2026-09-16·CVSS 7.5
CVE-2026-85522 [HIGH] Valkey vulnerabilities
Title: Valkey vulnerabilities
Summary: Several security issues were fixed in Valkey.
Madelyn Olson discovered that Valkey incorrectly handled TLS connections
under certain conditions. A remote attacker could possibly use this issue to
cause Valkey to crash, resulting in a denial of service, or execute arbitrary
code. (CVE-2026-56684)
It was discovered that Valkey incorrectly handled certain stream RDB payloads
when executing the RESTORE command. An authenticated remote attacker could
possibly use this issue to cause Valkey to crash, resulting in a denial
of service, or execute arbitrary code. (CVE-2026-63639)
It was discovered that Valkey incorrectly handled cluster slot migration
operations. A remote attacker could possibly use this issue to cause Valkey
to crash, resulting in a denia
Red Hat
valkey: Valkey: Remote out-of-bounds read in Slot Migration can lead to denial of service
vendor_redhat·2026-09-04·CVSS 5.3
CVE-2026-85522 [MEDIUM] CWE-125 valkey: Valkey: Remote out-of-bounds read in Slot Migration can lead to denial of service
valkey: Valkey: Remote out-of-bounds read in Slot Migration can lead to denial of service
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/cluster_migrateslots.c of the component Slot Migration. The manipulation of the argument job_name results in out-of-bounds read. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 9.0.5 and 9.1.1 addresses this issue. The patch is identified as f4dc3ca09eb650c2fe14060090a41c524eca803f. Upgrading the affected component is advised.
A flaw was found in the Slot Migration component of Valkey. A remote attacker can exploit an out-of-bounds read vulnerability in the `createSlotImportJob` function by manipula
VulDB
valkey-io valkey up to 9.5.4/9.1.0 Slot Migration cluster_migrateslots.c createSlotImportJob job_name out-of-bounds (Issue 4207 / Nessus ID 343098)
vuldb·2026-09-05·CVSS 5.3
CVE-2026-85522 [MEDIUM] valkey-io valkey up to 9.5.4/9.1.0 Slot Migration cluster_migrateslots.c createSlotImportJob job_name out-of-bounds (Issue 4207 / Nessus ID 343098)
A vulnerability classified as problematic was found in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/cluster_migrateslots.c of the component Slot Migration. The manipulation of the argument job_name results in out-of-bounds read.
This vulnerability is identified as CVE-2026-85522. The attack can be executed remotely. Additionally, an exploit exists.
Upgrading the affected component is advised.
GHSA
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0.
ghsa_unreviewed·2026-09-04
CVE-2026-85522 [MEDIUM] CWE-119 A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0.
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/cluster_migrateslots.c of the component Slot Migration. The manipulation of the argument job_name results in out-of-bounds read. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 9.0.5 and 9.1.1 addresses this issue. The patch is identified as f4dc3ca09eb650c2fe14060090a41c524eca803f. Upgrading the affected component is advised.
No detection rules found.
No public exploits indexed.
https://github.com/valkey-io/valkey/https://github.com/valkey-io/valkey/commit/f4dc3ca09eb650c2fe14060090a41c524eca803fhttps://github.com/valkey-io/valkey/issues/4207https://github.com/valkey-io/valkey/pull/4210https://github.com/valkey-io/valkey/releases/tag/9.1.1https://vuldb.com/cve/CVE-2026-85522https://vuldb.com/submit/895119https://vuldb.com/vuln/398707https://vuldb.com/vuln/398707/cti
2026-09-04
Published