CVE-2026-85522

A flaw was found in the Slot Migration component of Valkey. A remote attacker can exploit an out-of-bounds read vulnerability in the createSlotImportJob function by manipulating the job_name argument. This can lead to a denial of service, making the affected system unavailable.

An out-of-bounds read vulnerability was found in Valkey's Slot Migration component within the createSlotImportJob function in src/cluster_migrateslots.c. A remote attacker can trigger this flaw by manipulating the job_name argument during slot migration operations. Under default Red Hat configurations, this out-of-bounds memory read triggers a segmentation fault that crashes the Valkey daemon, resulting in a denial of service. The process is constrained by the unprivileged valkey service account and standard SELinux policies, preventing arbitrary code execution or host-level compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Restrict access to the Valkey cluster communication port using network firewalls so only trusted cluster nodes can interact with the migration interface. Additionally, configure Valkey ACLs to restrict untrusted clients from invoking cluster migration commands.