CVE-2026-107909 | FalkorDB up to 4.19.x Bolt Endpoint src/bolt/ws.c ws_read_frame/buffer_apply_mask out-of-bounds write

October 9, 2026 Yanac

A vulnerability has been found in FalkorDB up to 4.19.x and classified as critical. The impacted element is the function ws_read_frame/buffer_apply_mask of the file src/bolt/ws.c of the component Bolt Endpoint. Performing a manipulation results in out-of-bounds write.

This vulnerability is cataloged as CVE-2026-107909. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More