关键漏洞信息 漏洞标题: Remote DoS from malformed RESTORE command 严重性: Moderate (6.5/10) 受影响版本: <= 1.0.1 修复版本: 1.0.1 CVE ID: CVE-2026-21864 影响 A specially crafted RESTORE command can cause Valkey to hit an assertion, causing the server to shutdown. 细节 Valkey modules are required to handle errors in RDB parsing by using the VALKEYMODULE_OPTIONS_HANDLE_IO_ERRORS flag. If this flag is not set, errors encountered during parsing result in a system assertion which shuts down the server. Even though the valkey-bloom module correctly handled the parsing of invalid RDB data, it did not set the flag. 缓解措施 You can mitigate this defect by disabling the RESTORE command if it is unused by your application. CVSS v3 基础指标 Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High