Vulnerability in Falkordb
CVE-2026-107911
A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory. The function accepts a --bolt argument from any client and casts the following command argument, a Redis string object, to a Bolt client structure without checking its origin; the result-set code then dereferences pointers read from that object. The argument is parsed even when the Bolt endpoint is disabled, so default configurations are affected.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- 33c584b5-0579-4c06-b2a0-8d8329fcab9c (patch)
- 33c584b5-0579-4c06-b2a0-8d8329fcab9c (patch)
- 33c584b5-0579-4c06-b2a0-8d8329fcab9c (release-notes)
Frequently asked questions
- What is CVE-2026-107911?
- CVE-2026-107911 is a high-severity vulnerability in Falkordb, classified under Access of Resource Using Incompatible Type (Type Confusion). CVSS score: 7.5/10. Published 2026-10-09.
- How severe is CVE-2026-107911?
- High severity. CVSS v3 base score is 7.5 out of 10.