Skip to main content

Missing Report of Error Condition

CVE-2025-26268

Low
3.3/10

Summary

DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • LOW

CWE-392 - Missing Report of Error Condition

The software encounters an error but does not provide a status code or return value to indicate that an error has occurred.

References

Advisory Timeline

  • Published