CVE-2026-88411

Received Received - Intake

Improper Error Handling in FalkorDB Leads to DoS

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: MITRE

Description

Improper error handling in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB (Redis module) v4.20.1 leads to a Denial of Service (DoS) within the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-21

Last Modified

2026-09-21

Generated

2026-09-22

AI Q&A

2026-09-22

EPSS Evaluated

N/A

NVD

CVE-2026-88411

Affected Vendors & Products

Vendor	Product	Version / Range
falkordb	falkordb	4.20.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a Denial of Service (DoS) issue in FalkorDB v4.20.1 caused by improper error handling in the GRAPH.EFFECT component. It allows attackers to crash the application by exploiting errors in the effects_apply.c file.

Impact Analysis

The DoS vulnerability can cause the FalkorDB application to become unresponsive or crash, disrupting services that rely on it. This may lead to downtime, data unavailability, and potential loss of functionality for users and systems dependent on FalkorDB.

Compliance Impact

This vulnerability causes a Denial of Service (DoS) in FalkorDB v4.20.1 due to improper error handling. A DoS could disrupt system availability, potentially violating compliance requirements for GDPR (Article 32) and HIPAA (Security Rule) that mandate availability of personal health or user data.

Mitigation Strategies

Upgrade FalkorDB to a version that addresses the improper error handling in GRAPH.EFFECT. Avoid using the affected component until patched. Monitor application logs for DoS indicators like crashes or high resource usage.

Hi! I’m here to help you understand CVE-2026-88411. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70