CVE-2026-85522— valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds
Quick assessment
Affected
valkey-io valkey
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 valkey-io valkey 版本（9.5.4/9.1.0 及以下）中检测到一处漏洞。受影响的函数是位于文件 中的 ，该函数属于槽位迁移（Slot Migration）组件。对参数 的处理会导致越界读取（out-of-bounds read）。该攻击可远程执行，利用代码已公开，可能已被使用。升级到版本 9.0.5 和 9.1.1 可解决此问题。补丁标识为 。建议升级受影响的组件。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-85522
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/cluster_migrateslots.c of the component Slot Migration. The manipulation of the argument job_name results in out-of-bounds read. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 9.0.5 and 9.1.1 addresses this issue. The patch is identified as f4dc3ca09eb650c2fe14060090a41c524eca803f. Upgrading the affected component is advised.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-85522
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-85522
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-85522 (2)
Vendor Advisories for CVE-2026-85522 (1)
-
🔗 Submit #895119: Valkey Project Valkey 9.1.0 Out-of-bounds Read Read full article third-party-advisory
Security Blog Posts for CVE-2026-85522 (1)
Vendor Pages for CVE-2026-85522 (1)
Other References for CVE-2026-85522 (3)
-
-
🔗 CVE-2026-85522 in valkey third-party-advisory
-
🔗 CVE-2026-85522 valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds Read full article vdb-entry technical-description
IV. Related Vulnerabilities
Same product: valkey
-
CVE-2026-82677
valkey-io valkey Module Timer module.c moduleTimerHandler do -
CVE-2026-82631
valkey-io valkey Blocked-on-keys blocked.c handleClientsBloc -
CVE-2026-63639
Valkey: UAF in stream deserialization may lead to remote cod -
CVE-2026-56684
Valkey: TLS pending-data processing use-after-free may allow -
CVE-2026-27623
Valkey has Pre-Authentication DOS from malformed RESP reques
Same vendor: valkey-io
-
CVE-2026-82677
valkey-io valkey Module Timer module.c moduleTimerHandler do -
CVE-2026-82631
valkey-io valkey Blocked-on-keys blocked.c handleClientsBloc -
CVE-2026-63639
Valkey: UAF in stream deserialization may lead to remote cod -
CVE-2026-56684
Valkey: TLS pending-data processing use-after-free may allow -
CVE-2026-21864
Remote DoS from malformed RESTORE command
Same weakness: CWE-125
-
CVE-2026-86137
libxml2 <2.15.4 越界读取漏洞 -
CVE-2026-85769
Libtpms: libtpms: heap out-of-bounds read in tpm2 state unma -
CVE-2026-16660
IBM Db2 Mirror for i is affected by multiple vulnerabilities -
CVE-2026-85698
Turso through 0.8.0-pre.8 Out-of-Bounds Read Denial of Servi -
CVE-2026-85505
FreeIPMI 1.6.19前ipmi-oem栈缓冲区越界读
V. Comments for CVE-2026-85522
No comments yet