CVE-2026-81934
Redis TLS pending-data list use-after-free
CVSS Score
7.1
EPSS Score
0.6%
EPSS Percentile
46th
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
| CWE | CWE-416 |
| Vendor | redis |
| Product | redis |
| Ecosystems | |
| Industries | Technology |
| Published | Aug 27, 2026 |
| Last Updated | Aug 31, 2026 |
Stay Ahead of the Next One
Get instant alerts for redis redis
Be the first to know when new high vulnerabilities affecting redis redis are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Redis / Redis
0 < 8.8.2 0 < 8.2.9 0 < 8.4.6 0 < 8.6.6 0 < 8.10.1 0 < 7.4.11 0 < 6.2.24 0 < 7.2.16
Redis / Redis Software (Enterprise)
0 < 8.2.0-46 0 < 8.0.20-96 0 < 7.22.2-179 0 < 7.8.6-303
References
github.com: https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834 github.com: https://github.com/v12-security/pocs/tree/main/redis/server_ssl raw.githubusercontent.com: https://raw.githubusercontent.com/redis/redis/8.2/00-RELEASENOTES raw.githubusercontent.com: https://raw.githubusercontent.com/redis/redis/8.4/00-RELEASENOTES raw.githubusercontent.com: https://raw.githubusercontent.com/redis/redis/8.6/00-RELEASENOTES raw.githubusercontent.com: https://raw.githubusercontent.com/redis/redis/8.8/00-RELEASENOTES raw.githubusercontent.com: https://raw.githubusercontent.com/redis/redis/8.10/00-RELEASENOTES raw.githubusercontent.com: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-239-01.json cve.org: https://www.cve.org/CVERecord?id=CVE-2026-81934 github.com: https://github.com/redis/redis/releases/tag/6.2.24 github.com: https://github.com/redis/redis/releases/tag/7.2.16 github.com: https://github.com/redis/redis/releases/tag/7.4.11 github.com: https://github.com/redis/redis/releases/tag/8.4.6 github.com: https://github.com/redis/redis/releases/tag/8.2.9 github.com: https://github.com/redis/redis/releases/tag/8.6.6 github.com: https://github.com/redis/redis/releases/tag/8.8.2 github.com: https://github.com/redis/redis/releases/tag/8.10.1 redis.io: https://redis.io/docs/latest/operate/rs/release-notes/rs-8-2-releases/rs-8-2-0-46/ redis.io: https://redis.io/docs/latest/operate/rs/release-notes/rs-8-0-releases/rs-8-0-20-96/ redis.io: https://redis.io/docs/latest/operate/rs/release-notes/rs-7-22-releases/rs-7-22-2-179/ redis.io: https://redis.io/docs/latest/operate/rs/release-notes/rs-7-8-releases/rs-7-8-6-303/ raw.githubusercontent.com: https://raw.githubusercontent.com/redis/redis/7.4/00-RELEASENOTES raw.githubusercontent.com: https://raw.githubusercontent.com/redis/redis/7.2/00-RELEASENOTES raw.githubusercontent.com: https://raw.githubusercontent.com/redis/redis/6.2/00-RELEASENOTES