CVE-2026-23479

High · CVSS 8.8

Redis (redis-server) — Use-After-Free (UAF) Remote Code Execution via unblock client flow

CVSS: 8.8; nvd
EPSS: —
KEV: No
Class: other; CWE-416, CWE-416

Description

Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3.

Search profile — drives PoC discovery

Symbols processCommandAndResetClientunblockClientunblock client flowblocked client evictionprocessCommand

Keywords CVE-2026-23479Redis use-after-freeredis-server UAF RCEGHSA-93m2-935m-8rj3Redis unblock clientprocessCommandAndResetClientRedis blocked client evictionRedis 8.6.3

Versions: 7.2.0 <= redis-server < 8.6.3

Ranked PoCs (4) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

pduggusa/redis-cve-2026-23479-check needs review

recent activity

gh_search · Python

★ 0
v1c0mmrt/redis-cve-2026-23479-scanner needs review

recent activity

gh_search · Python

★ 0
jenniferreire26/CVE-2026-23479 needs review

recent activity

gh_search

★ 0
mgiay/CVE-2026-25589-25588-25243-23631-23479-REDIS needs review

recent activity

gh_search · Shell

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-06-30T06:00:22.000Z · profiled 2026-06-30T18:30:14.000Z