CVE-2026-23479CWE-416

redis-server use-after-free in unblock client flow may allow remote code execution

High · published May 5, 2026

CVSS v4.0
7.7
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01506 · 74.2th percentile
Weakness
CWE-416 · Use After Free
Published
2026-05-05T16:36Z
EPSS history
Timeline
  • 05 MAY 16:36Z
    redis-server use-after-free in unblock client flow may allow remote code execution
    cvelistv5