FalkorDB vulnerabilities
9 published CVEs name FalkorDB among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 5Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-107911
Type confusion in FalkorDB GRAPH.QUERY via the --bolt argument
FalkorDB · FalkorDB
High7.7 - CVE-2026-107910
Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling
FalkorDB · FalkorDB
Critical9.2 - CVE-2026-107909
Pre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload length
FalkorDB · FalkorDB
High8.8 - CVE-2026-107908
Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET message
FalkorDB · FalkorDB
Critical9.3 - CVE-2026-7826
Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB
FalkorDB · FalkorDB
High8.8 - CVE-2026-7827
Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB
FalkorDB · FalkorDB
Critical9.2 - CVE-2026-5759
Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB
FalkorDB · FalkorDB
Critical9.3 - CVE-2026-10130
QueryWeaver Authentication Bypass via Email Signup Token Issuance for Existing Accounts
FalkorDB · QueryWeaver
High8.8 - CVE-2026-6057
Unauthenticated Path Traversal in FalkorDB Browser Leads to Remote Code Execution
FalkorDB · FalkorDB Browser
Critical9.8