{"schema_version":1,"title":"FalkorDB vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in FalkorDB: 7 in the last 7 days and 8 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-88412, was published on 21 September 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/falkordb","json_url":"https://junglewise.ai/threats/vendors/falkordb.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/falkordb","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":6,"all_time":9,"critical":1,"exploited":0,"last_7_days":7,"last_30_days":7,"last_90_days":8,"last_365_days":9},"latest":[{"cve":"CVE-2026-88412","cvss":5.3,"epss":0.004,"slug":"cve-2026-88412-an-integer-overflow-in-the-bulkinsert-readproperty-component-bulk","title":"FalkorDB integer overflow in bulk insert array parsing","severity":"medium","exploited":false,"published_at":"2026-09-21T21:17:15.513+00:00","url":"https://junglewise.ai/threats/cve-2026-88412-an-integer-overflow-in-the-bulkinsert-readproperty-component-bulk"},{"cve":"CVE-2026-88411","cvss":7.5,"epss":0.0049,"slug":"cve-2026-88411-improper-error-handling-in-the-graph-effect-component-effects","title":"FalkorDB GRAPH.EFFECT improper error handling denial of service","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:15.38+00:00","url":"https://junglewise.ai/threats/cve-2026-88411-improper-error-handling-in-the-graph-effect-component-effects"},{"cve":"CVE-2026-88410","cvss":7.1,"epss":0.0032,"slug":"cve-2026-88410-the-graph-udf-in-falkordb-redis-module-v4-20-1-to-v4-20-4-is-not","title":"FalkorDB graph.UDF write flag missing and uninterruptible execution","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:15.247+00:00","url":"https://junglewise.ai/threats/cve-2026-88410-the-graph-udf-in-falkordb-redis-module-v4-20-1-to-v4-20-4-is-not"},{"cve":"CVE-2026-88409","cvss":8.8,"epss":0.0048,"slug":"cve-2026-88409-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to","title":"FalkorDB buffer overflow in GraphBLAS matrix decode","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:15.12+00:00","url":"https://junglewise.ai/threats/cve-2026-88409-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to"},{"cve":"CVE-2026-88408","cvss":6.5,"epss":0.0041,"slug":"cve-2026-88408-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to","title":"FalkorDB stack overflow in _GetGroup function","severity":"medium","exploited":false,"published_at":"2026-09-21T21:17:14.99+00:00","url":"https://junglewise.ai/threats/cve-2026-88408-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to"},{"cve":"CVE-2026-88407","cvss":7.5,"epss":0.0046,"slug":"cve-2026-88407-an-out-of-bounds-read-in-the-node-token-count-relation-token","title":"FalkorDB out-of-bounds read in GRAPH.BULK command","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:14.86+00:00","url":"https://junglewise.ai/threats/cve-2026-88407-an-out-of-bounds-read-in-the-node-token-count-relation-token"},{"cve":"CVE-2026-88406","cvss":7.5,"epss":0.0046,"slug":"cve-2026-88406-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to","title":"FalkorDB stack overflow in UNION clause validation","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:14.733+00:00","url":"https://junglewise.ai/threats/cve-2026-88406-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to"},{"cve":"CVE-2026-10130","cvss":8.2,"slug":"cve-2026-10130-falkordb-queryweaver-authentication-bypass-via-email-signup","title":"FalkorDB QueryWeaver authentication bypass via email signup","severity":"high","exploited":false,"published_at":"2026-07-18T23:17:00.397+00:00","url":"https://junglewise.ai/threats/cve-2026-10130-falkordb-queryweaver-authentication-bypass-via-email-signup"},{"cve":"CVE-2026-6057","cvss":9.8,"epss":0.0016,"slug":"cve-2026-6057-falkordb-browser-path-traversal-in-file-upload-api","title":"FalkorDB Browser path traversal in file upload API","severity":"critical","exploited":false,"published_at":"2026-04-10T10:16:04.547+00:00","url":"https://junglewise.ai/threats/cve-2026-6057-falkordb-browser-path-traversal-in-file-upload-api"}],"vendor":{"hub":true,"name":"FalkorDB","slug":"falkordb","homepage":"https://www.falkordb.com/","description":"FalkorDB is a high-performance graph database company focused on low-latency and AI-driven graph applications.","url":"https://junglewise.ai/threats/vendors/falkordb"},"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-6057","cvss":9.8,"epss":0.0016,"slug":"cve-2026-6057-falkordb-browser-path-traversal-in-file-upload-api","title":"FalkorDB Browser path traversal in file upload API","severity":"critical","exploited":false,"published_at":"2026-04-10T10:16:04.547+00:00","url":"https://junglewise.ai/threats/cve-2026-6057-falkordb-browser-path-traversal-in-file-upload-api"},{"cve":"CVE-2026-88409","cvss":8.8,"epss":0.0048,"slug":"cve-2026-88409-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to","title":"FalkorDB buffer overflow in GraphBLAS matrix decode","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:15.12+00:00","url":"https://junglewise.ai/threats/cve-2026-88409-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to"},{"cve":"CVE-2026-10130","cvss":8.2,"slug":"cve-2026-10130-falkordb-queryweaver-authentication-bypass-via-email-signup","title":"FalkorDB QueryWeaver authentication bypass via email signup","severity":"high","exploited":false,"published_at":"2026-07-18T23:17:00.397+00:00","url":"https://junglewise.ai/threats/cve-2026-10130-falkordb-queryweaver-authentication-bypass-via-email-signup"},{"cve":"CVE-2026-88411","cvss":7.5,"epss":0.0049,"slug":"cve-2026-88411-improper-error-handling-in-the-graph-effect-component-effects","title":"FalkorDB GRAPH.EFFECT improper error handling denial of service","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:15.38+00:00","url":"https://junglewise.ai/threats/cve-2026-88411-improper-error-handling-in-the-graph-effect-component-effects"},{"cve":"CVE-2026-88407","cvss":7.5,"epss":0.0046,"slug":"cve-2026-88407-an-out-of-bounds-read-in-the-node-token-count-relation-token","title":"FalkorDB out-of-bounds read in GRAPH.BULK command","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:14.86+00:00","url":"https://junglewise.ai/threats/cve-2026-88407-an-out-of-bounds-read-in-the-node-token-count-relation-token"},{"cve":"CVE-2026-88406","cvss":7.5,"epss":0.0046,"slug":"cve-2026-88406-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to","title":"FalkorDB stack overflow in UNION clause validation","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:14.733+00:00","url":"https://junglewise.ai/threats/cve-2026-88406-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to"},{"cve":"CVE-2026-88410","cvss":7.1,"epss":0.0032,"slug":"cve-2026-88410-the-graph-udf-in-falkordb-redis-module-v4-20-1-to-v4-20-4-is-not","title":"FalkorDB graph.UDF write flag missing and uninterruptible execution","severity":"high","exploited":false,"published_at":"2026-09-21T21:17:15.247+00:00","url":"https://junglewise.ai/threats/cve-2026-88410-the-graph-udf-in-falkordb-redis-module-v4-20-1-to-v4-20-4-is-not"},{"cve":"CVE-2026-88408","cvss":6.5,"epss":0.0041,"slug":"cve-2026-88408-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to","title":"FalkorDB stack overflow in _GetGroup function","severity":"medium","exploited":false,"published_at":"2026-09-21T21:17:14.99+00:00","url":"https://junglewise.ai/threats/cve-2026-88408-falkordb-redis-module-v4-20-1-to-v4-20-4-was-discovered-to"},{"cve":"CVE-2026-88412","cvss":5.3,"epss":0.004,"slug":"cve-2026-88412-an-integer-overflow-in-the-bulkinsert-readproperty-component-bulk","title":"FalkorDB integer overflow in bulk insert array parsing","severity":"medium","exploited":false,"published_at":"2026-09-21T21:17:15.513+00:00","url":"https://junglewise.ai/threats/cve-2026-88412-an-integer-overflow-in-the-bulkinsert-readproperty-component-bulk"}],"generated_at":"2026-09-28T03:07:00.154823+00:00","technologies":[{"name":"FalkorDB","slug":"falkordb","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/falkordb"}]}