What’s Vulnerable › Vulnerabilities

CVE-2026-81934: Redis TLS pending-data list use-after-free

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-27 · updated 2026-08-31
• Weakness: CWE-416

Description

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.

Affected products

• Redis: before 8.8.2; before 8.2.9; before 8.4.6; before 8.6.6; before 8.10.1; before 7.4.11 — fixed in 6.2.24, 7.2.16, 7.4.11, 8.10.1, 8.2.9, 8.4.6
• Redis Software (Enterprise): before 8.2.0-46; before 8.0.20-96; before 7.22.2-179; before 7.8.6-303 — fixed in 7.22.2-179, 7.8.6-303, 8.0.20-96, 8.2.0-46

How to fix

Upgrade to a fixed version: Redis 6.2.24, 7.2.16, 7.4.11, 8.10.1; Redis Software (Enterprise) 7.22.2-179, 7.8.6-303, 8.0.20-96, 8.2.0-46. Check the vendor advisory for mitigations.

References

• https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834
• https://github.com/redis/redis/releases/tag/6.2.24
• https://github.com/redis/redis/releases/tag/7.2.16
• https://github.com/redis/redis/releases/tag/7.4.11
• https://github.com/redis/redis/releases/tag/8.10.1
• https://github.com/redis/redis/releases/tag/8.2.9
• https://github.com/redis/redis/releases/tag/8.4.6
• https://github.com/redis/redis/releases/tag/8.6.6
• https://github.com/redis/redis/releases/tag/8.8.2
• https://github.com/v12-security/pocs/tree/main/redis/server_ssl
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-239-01.json
• https://raw.githubusercontent.com/redis/redis/6.2/00-RELEASENOTES

Get alerted when CVE-2026-81934 or the next vulnerability affects your stack