{"id":"CVE-2026-81934","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-81934","summary":"Redis TLS pending-data list use-after-free","details":"Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.","published":"2026-08-27T19:40:15.141Z","modified":"2026-08-29T08:12:51.602820Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":{"url":"https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834","label":"redis/redis@6d088c3"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/81xxx/CVE-2026-81934.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81934"},{"type":"ADVISORY","url":"https://raw.githubusercontent.com/redis/redis/8.10/00-RELEASENOTES"},{"type":"ADVISORY","url":"https://raw.githubusercontent.com/redis/redis/8.2/00-RELEASENOTES"},{"type":"ADVISORY","url":"https://raw.githubusercontent.com/redis/redis/8.4/00-RELEASENOTES"},{"type":"ADVISORY","url":"https://raw.githubusercontent.com/redis/redis/8.6/00-RELEASENOTES"},{"type":"ADVISORY","url":"https://raw.githubusercontent.com/redis/redis/8.8/00-RELEASENOTES"},{"type":"FIX","url":"https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834"},{"type":"EVIDENCE","url":"https://github.com/v12-security/pocs/tree/main/redis/server_ssl"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-29T08:12:51.602820Z"}}