CVE-2026-107911

A type confusion vulnerability in the readflags function src/commands/cmddispatcher.c in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY to cause a denial of service and possibly disclose or corrupt memory. The function accepts a --bolt argument from any clie...