CVE-2026-82631
valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free
CVSS Score
2.2
EPSS Score
0.0%
EPSS Percentile
0th
A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free. The attack may be performed from remote. A high complexity level is associated with this attack. The exploitability is described as difficult. The exploit has been released to the public and may be used for attacks. The patch is identified as b2fb0e13f5b4c8c2fb63dcfc2c37a067a0d6d20b. Applying a patch is advised to resolve this issue.
| CWE | CWE-416 CWE-119 |
| Vendor | valkey-io |
| Product | valkey |
| Published | Aug 31, 2026 |
Stay Ahead of the Next One
Get instant alerts for valkey-io valkey
Be the first to know when new low vulnerabilities affecting valkey-io valkey are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
valkey-io / valkey
9.1.0
References
vuldb.com: https://vuldb.com/vuln/397129 vuldb.com: https://vuldb.com/vuln/397129/cti vuldb.com: https://vuldb.com/cve/CVE-2026-82631 vuldb.com: https://vuldb.com/submit/893793 github.com: https://github.com/valkey-io/valkey/issues/4198 github.com: https://github.com/valkey-io/valkey/pull/4212 github.com: https://github.com/user-attachments/files/30111628/PoC.zip github.com: https://github.com/valkey-io/valkey/commit/b2fb0e13f5b4c8c2fb63dcfc2c37a067a0d6d20b github.com: https://github.com/valkey-io/valkey/
Credits
🔍 VULL (VulDB User)