CVE-2026-104192 | DragonflyDB Dragonfly up to 1.39 OpaqueObjLoader src/server/rdb_load.cc CreateStream double free

October 13, 2026 Yanac

A vulnerability, which was classified as critical, was found in DragonflyDB Dragonfly up to 1.39. This impacts the function OpaqueObjLoader::CreateStream of the file src/server/rdb_load.cc of the component OpaqueObjLoader. Such manipulation leads to double free.

This vulnerability is traded as CVE-2026-104192. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More