4.8
Medium
CVE-2026-82677 A vulnerability was determined in valkey-io valkey 9.1.0
Description
A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: b349fe2821e3998534b1454c1b64a478daf8c6b7. To fix this issue, it is recommended to deploy a patch.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| valkey | 9.1.0 | No fix stated |
Other CVEs of valkey
The 9 CVEs of valkey →
CVE-2026-86227
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1
2.3
Low
CVE-2026-85522
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0
6.9
Medium
CVE-2026-82631
A security flaw has been discovered in valkey-io valkey 9.1.0
2.1
Low
CVE-2026-63639
Valkey is a distributed key-value database
8.8
High