low3.3
CVE-2025-26268
DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command.
Impact
DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dragonflydb | Dragonfly | before 1.27.0 |