CVE-2026-81934 Redis TLS pending-data list use-after-free
Remote unauthenticated attackers can execute arbitrary code on Redis servers configured with TLS due to a use-after-free vulnerability.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-81934?
CVE-2026-81934 is a high-severity use after free vulnerability in Redis, published on 27 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
Weakness: CWE-416
Which versions are affected by CVE-2026-81934?
Linux distribution packages (16)
redis SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 6.2.6-150400.3.52.1 |
redis SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 6.2.6-150400.3.52.1 |
redis SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | All versions | 6.2.6-150400.3.52.1 |
redis7 SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | All versions | 7.0.8-150500.3.37.1 |
redis SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | All versions | 6.2.6-150400.3.52.1 |
redis7 SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | All versions | 7.0.8-150500.3.37.1 |
redis SUSE:Linux Enterprise Server 15 SP4-LTSS | All versions | 6.2.6-150400.3.52.1 |
redis SUSE:Linux Enterprise Server 15 SP5-LTSS | All versions | 6.2.6-150400.3.52.1 |
redis7 SUSE:Linux Enterprise Server 15 SP5-LTSS | All versions | 7.0.8-150500.3.37.1 |
redis SUSE:Linux Enterprise Server 15 SP6-LTSS | All versions | 7.2.4-150600.3.30.1 |
redis7 SUSE:Linux Enterprise Server 15 SP6-LTSS | All versions | 7.0.8-150600.8.31.1 |
redis SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | All versions | 6.2.6-150400.3.52.1 |
redis SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | All versions | 6.2.6-150400.3.52.1 |
redis7 SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | All versions | 7.0.8-150500.3.37.1 |
redis SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | All versions | 7.2.4-150600.3.30.1 |
redis7 SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | All versions | 7.0.8-150600.8.31.1 |
How do I fix CVE-2026-81934?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2026-81934 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-81934 exists.
Sources
Also known as AZL-98240, BELL-CVE-2026-81934, CLSA-2026-1789377770, CLSA-2026-1789395343, DEBIAN-CVE-2026-81934, GHSA-32xw-c2hw-m34g and 5 more.