CVE-2026-85522

A flaw was found in the Slot Migration component of Valkey. A remote attacker can exploit an out-of-bounds read vulnerability in the createSlotImportJob function by manipulating the jobname argument. This can lead to a denial of service, making the affected system unavailable. Mitigation Restrict...

Medium: valkey

Issue Overview: A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free. The attack may be performed from remote. ...

Linux Distros Unpatched Vulnerability : CVE-2026-85522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file...

CVE-2026-85522

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522 valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

EUVD-2026-71102

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522

A remote out-of-bounds read vulnerability in valkey-io valkey (up to 9.5.4/9.1.0) affects the createSlotImportJob function in src/cluster_migrateslots.c, part of the Slot Migration component. Manipulating the job_name argument triggers the read, requiring no authentication and yielding a low avai...

CVE-2026-85522

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522 valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522: Out-of-bounds Read

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

CVE-2026-85522: Out-of-bounds Read

A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/clustermigrateslots.c of the component Slot Migration. The manipulation of the argument jobname results in out-of-bounds read. The attack can be...

PT-2026-85529

Name of the Vulnerable Software and Affected Versions valkey-io valkey versions prior to 9.0.5 valkey-io valkey versions prior to 9.1.1 Description A remote out-of-bounds read exists in the Slot Migration component within the createSlotImportJob function of the src/cluster migrateslots.c file. Th...

valkey: Valkey: Remote out-of-bounds read in Slot Migration can lead to denial of service

A flaw was found in the Slot Migration component of Valkey. A remote attacker can exploit an out-of-bounds read vulnerability in the createSlotImportJob function by manipulating the jobname argument. This can lead to a denial of service, making the affected system unavailable...