CVE-2026-81934

Redis contains a use-after-free vulnerability in the tlsProcessPendingData() function, which handles the TLS pending-data list when TLS support is configured. A remote, unauthenticated attacker may exploit this to execute arbitrary commands with the privileges of the Redis server. The vulnerabili...